Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7534
HistoryOct 01, 2018 - 2:13 a.m.

Regular Expression Denial Of Service (ReDoS)

2018-10-0102:13:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

ua-parser-js is vulnerable to regular expression denial of service (ReDoS). The vulnerability exists because the string parser does not use proper regular expressions to filter out malicious strings passing to it.