Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36183
HistoryJun 28, 2022 - 9:38 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-06-2809:38:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
scaffold-helper
redos
remote attacker
denial of service
insufficient checks
crafted files

EPSS

0.001

Percentile

36.8%

scaffold-helper is vulnerable to regular expression denial of service (ReDoS) attacks. A remote attacker is able to trigger denial of service conditions due to insufficient checks in getProcessedPath or getDynamicFilename functions. The vulnerability is exploited via copying crafted invalid files.

EPSS

0.001

Percentile

36.8%

Related for VERACODE:36183