Описание
Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks the server. This is fixed in version 1.18.9.
Ссылки
- Patch
- Release Notes
- ExploitVendor Advisory
- ExploitVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.18.9 (исключая)
cpe:2.3:a:9001:copyparty:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00061
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
github
6 месяцев назад
copyparty allows Regex Denial of Service (ReDoS) in the upload listing
EPSS
Процентиль: 19%
0.00061
Низкий
7.5 High
CVSS3
Дефекты
CWE-400