Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-21252

Опубликовано: 13 янв. 2021
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
CVSS2: 5
EPSS Низкий

Описание

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:jqueryvalidation:jquery_validation:*:*:*:*:*:node.js:*:*
Версия до 1.19.3 (исключая)
Конфигурация 2
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*

EPSS

Процентиль: 66%
0.00504
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-400

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 5 лет назад

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.

CVSS3: 7.5
redhat
около 5 лет назад

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.

CVSS3: 5.3
debian
около 5 лет назад

The jQuery Validation Plugin provides drop-in validation for your exis ...

CVSS3: 7.5
github
около 5 лет назад

Regular Expression Denial of Service in jquery-validation

EPSS

Процентиль: 66%
0.00504
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-400
CWE-400