Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3907
HistoryApr 17, 2017 - 3:10 a.m.

Regular Expression Denial Of Service (ReDoS)

2017-04-1703:10:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1

0.001 Low

EPSS

Percentile

47.1%

useragent is vulnerable to denial of service (DoS) attacks. These attacks are possible through the regular expression used to parse the useragent headers. If an attacker edits their own headers to create an extremely long useragent string, it will cause an event loop which blocks the server.

CPENameOperatorVersion
useragentle2.1.12

0.001 Low

EPSS

Percentile

47.1%