Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38571
HistoryDec 23, 2022 - 5:51 a.m.

Regular Expression Denial Of Service (ReDoS)

2022-12-2305:51:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
53
regular expression denial of service
is.js
vulnerability
insecure regex pattern
url matching
malicious urls

EPSS

0.001

Percentile

38.2%

is_js is vulnerable to regular expression denial of service. The vulnerability exists due to the insecure regex pattern used for url matching in is.js allowing an attacker to crash the application by providing malicious urls.

EPSS

0.001

Percentile

38.2%

Related for VERACODE:38571