Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36581
HistoryAug 03, 2022 - 7:44 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-08-0307:44:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

50.1%

v8n is vulnerable to regular expression denial of service. The vulnerability exists in the availableRules.lowercase() function in v8n.js due to the lack of complexity in the regex which allows an attacker to crash the application by providing malicious input.

CPENameOperatorVersion
v8nle1.5.0
v8nle1.5.0

0.001 Low

EPSS

Percentile

50.1%

Related for VERACODE:36581