Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30352
HistoryMay 05, 2021 - 7:22 a.m.

Regular Expression Denial Of Service (ReDoS)

2021-05-0507:22:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
vulnerability
regular expression
denial of service
emailvalidator
resource consumption

EPSS

0.002

Percentile

54.9%

vaadin-compatibility-server is vulnerable to regular expression denial of service. The vulnerability exists due to unsafe validation RegEx in EmailValidator, which will cause uncontrolled resource consumption when an attacker submits a malicious email address.

EPSS

0.002

Percentile

54.9%