Lucene search
Veracode Vulnerability DatabaseVERACODE:32261HistorySep 28, 2021 - 7:57 a.m.
Regular Expression Denial Of Service (ReDoS)
2021-09-2807:57:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
45.9%
jsoneditor is vulnerable to regular expression denial of service. The use of inefficient regex pattern for trimmedValue in getInnerText function of util.js allows a malicious user to crash the application by providing a malicious input.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jsoneditor | le | 9.5.5 | |
| jsoneditor | le | 9.5.5 | |
| jsoneditor | le | 9.5.3 | |
| jsoneditor | le | 9.5.5 | |
| jsoneditor | le | 9.5.5 | |
| jsoneditor | le | 9.5.3 |
Related
prion
prion
Design/Logic Flaw
2021-09-27 13:15:00
cvelist
cvelist
huntr
huntr
Inefficient Regular Expression Complexity in josdejong/jsoneditor
2021-09-20 06:33:52
nvd
nvd
CVE-2021-3822
2021-09-27 13:15:07
cve
cve
CVE-2021-3822
2021-09-27 13:15:07
osv
osv
CVE-2021-3822
2021-09-27 13:15:07
Regular Expression Denial of Service in jsoneditor
2021-09-29 17:15:55
github
github
Regular Expression Denial of Service in jsoneditor
2021-09-29 17:15:55