Lucene search
Veracode Vulnerability DatabaseVERACODE:38812HistoryJan 10, 2023 - 5:50 a.m.
Regular Expression Denial Of Service (ReDoS)
2023-01-1005:50:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
mootools-core
redos
vulnerability
slick.parse function
denial of service
remote attackers
css selector
runtime.
0.001 Low
EPSS
Percentile
35.7%
mootools-core is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability exists via the Slick.parse function in Slick.Parser.js, which does not properly handle user-injected string into a CSS selector at runtime, which allows remote attackers to cause denial of service conditions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mootools-core | le | 1.20 | |
| mootools-core | le | 1.20 |
Related
nvd
nvd
CVE-2021-32821
2023-01-03 17:15:10
osv
osv
CVE-2021-32821
2023-01-03 17:15:10
MooTools Regular Expression Denial of Service
2023-01-03 18:30:25
cvelist
cvelist
CVE-2021-32821 Regular expression Denial of Service in MooTools
2023-01-03 00:00:00
ubuntucve
ubuntucve
CVE-2021-32821
2023-01-03 00:00:00
debiancve
debiancve
CVE-2021-32821
2023-01-03 17:15:10
prion
prion
Design/Logic Flaw
2023-01-03 17:15:00
cve
cve
CVE-2021-32821
2023-01-03 17:15:10
github
github
MooTools Regular Expression Denial of Service
2023-01-03 18:30:25