Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:36802
HistoryAug 25, 2022 - 4:18 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-08-2504:18:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
redos
uri-template-lite
insecure regex pattern
index.js
malicious input
uri.expand method

EPSS

0.001

Percentile

40.9%

uri-template-lite is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for the expandRe attribute in index.js, allowing an attacker to crash the application by providing a malicious input through the URI.expand method.

EPSS

0.001

Percentile

40.9%

Related for VERACODE:36802