Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30051
HistoryApr 20, 2021 - 8:25 a.m.

Regular Expression Denial Of Service (ReDoS)

2021-04-2008:25:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.002 Low

EPSS

Percentile

54.7%

vaadin-server is vulnerable to regular expression denial of service. Unsafe validation RegEx in EmailValidator class allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.

CPENameOperatorVersion
vaadin-serverle7.7.17

0.002 Low

EPSS

Percentile

54.7%