Regular Expression Denial Of Service (ReDoS)

2022-12-2002:22:36

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

regular expression denial of service

insecure regular expression

application crash

software vulnerability

EPSS

0.003

Percentile

66.6%

JSON

active_attr is vulnerable to regular expression denial of service.The vulnerability exists in the call function of boolean_typecaster.rb due to the usage of an insecure regular expression which allows an attacker to cause an application crash via malicious input.