Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m6m7-mf2p-99p5

Опубликовано: 08 дек. 2021
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.

EPSS

Процентиль: 93%
0.05214
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-770

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 5 лет назад

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.

CVSS3: 7.5
nvd
почти 5 лет назад

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.

CVSS3: 7.5
debian
почти 5 лет назад

calibre before 5.32.0 contains a regular expression that is vulnerable ...

CVSS3: 7.5
altlinux
почти 5 лет назад

ALT-PU-2021-3521: package `calibre` update to version 5.33.2-alt1

EPSS

Процентиль: 93%
0.05214
Низкий

7.5 High

CVSS3

Дефекты

CWE-400
CWE-770