CVE-2016-10540

Опубликовано: 31 мая 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript RegExp objects. The primary function, minimatch(path, pattern) in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the pattern parameter.

Ссылки

https://nodesecurity.io/advisories/118
Exploit
Third Party Advisory
https://nodesecurity.io/advisories/118
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:minimatch_project:minimatch:*:*:*:*:*:node.js:*:*

Версия до 3.0.1 (включая)

EPSS

Процентиль: 62%

0.00435

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

CWE-20

Связанные уязвимости

CVE-2016-10540

CVSS3: 7.5

ubuntu

больше 7 лет назад

Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is vulnerable to ReDoS in the `pattern` parameter.

CVE-2016-10540

CVSS3: 7.5

debian

больше 7 лет назад

Minimatch is a minimal matching utility that works by converting glob ...

GHSA-hxm2-r34f-qmc5

CVSS3: 7.5

github

больше 7 лет назад

Regular Expression Denial of Service in minimatch

EPSS

Процентиль: 62%

0.00435

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400

CWE-20