Regular Expression Denial Of Service

🗓️ 09 Jan 2023 04:25:17Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 46 Views

Luxon software vulnerable to Regular Expression Denial Of Service via 'replace' parameter in 'regexParser.js', allowing attacker to supply arbitrary input, resulting in system cras

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: A vulnerability in Luxon may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-22467)	23 Mar 202321:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to denial of service due to Moment CVE-2023-22467	20 Mar 202318:15	–	ibm
IBM Security Bulletins	Security Bulletin: Moment.js issue of validating, manipulating, and formatting dates	13 Aug 202406:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container flows that use scheduled event nodes may be vulnerable to denial of service due to [CVE-2023-22467]	2 Feb 202320:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Mobile (iOS) is affected by multiple vulnerabilities	21 Oct 202415:51	–	ibm
Circl	CVE-2023-22467	5 Jan 202300:18	–	circl
CNNVD	Luxon 安全漏洞	4 Jan 202300:00	–	cnnvd
CVE	CVE-2023-22467	4 Jan 202321:52	–	cve
Cvelist	CVE-2023-22467 luxon.js inefficient regular expression complexity vulnerability	4 Jan 202321:52	–	cvelist

Vulners

Node

momentjs luxonRange0.4.0–1.28.0js

momentjs luxonRange2.0.2–2.4.0js

momentjs luxonRange3.0.1–3.1.0js

momentjs luxonRange0.2.1–1.28.0js

momentjs luxonRange2.0.0–2.5.1js

momentjs luxonRange3.0.0–3.2.0js

Source	Link
github	www.github.com/moment/moment/pull/6015
github	www.github.com/moment/luxon/commit/612e0c778d2dedb947f3e5160c46601688ea4959
github	www.github.com/moment/luxon/commit/204cdfe65e4a3f0e3a9d0d7489278152d2c51234
github	www.github.com/moment/luxon/commit/5ab3bf64a10da929a437629cdb2f059bb83212bf
github	www.github.com/moment/luxon/security/advisories/GHSA-3xq5-wjfh-ppjc
github	www.github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/44I3WAJKYXDLOVYRGMHAUXMIV4SPFXDZ/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/4LIVOASKBQH7FEUI5RWM3SOHR6VK7ZZR/

12 Feb 2024 07:32Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00726