Regular Expression Denial Of Service (ReDoS)

🗓️ 24 Jan 2023 04:53:25Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

Vulnerability in cookiejar.js parse function due to inefficient regular expression complexit

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:38	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2023	1 Apr 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	24 Feb 202319:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data	25 Jul 202312:06	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 May 202318:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to denial of service due to Node.js cookiejar module ( CVE-2022-25901 )	8 Aug 202418:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities	10 Oct 202313:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	7 Mar 202309:18	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insights 1.6.10 addresses multiple security vulnerabilities.	27 Sep 202321:11	–	ibm

Vulners

Node

node-cookiejar node-cookiejarMatch2.1.2-1debian

AND

debian debian_linuxMatch999

cookiejar_project cookiejarRange1.0.0–2.1.3js

cookiejar_project cookiejarRange2.0.6–2.1.3js

Source	Link
github	www.github.com/bmeck/node-cookiejar/commit/eaa00021caf6ae09449dde826108153b578348e5
github	www.github.com/bmeck/node-cookiejar/pull/39
github	www.github.com/advisories/GHSA-h452-7996-h45h
github	www.github.com/bmeck/node-cookiejar/blob/master/cookiejar.js%23L73
github	www.github.com/bmeck/node-cookiejar/pull/39/commits/eaa00021caf6ae09449dde826108153b578348e5
lists	www.lists.debian.org/debian-lts-announce/2023/09/msg00008.html

13 Feb 2025 19:39Current

7.3High risk

Vulners AI Score7.3

CVSS 3.15.3 - 7.5

EPSS0.00074

SSVC