Описание
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing a URL request to exhaust processing time. This issue is fixed in 7.8.0.
EPSS
Процентиль: 26%
0.00335
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
Связанные уязвимости
CVSS3: 7.5
ubuntu
8 дней назад
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing a URL request to exhaust processing time. This issue is fixed in 7.8.0.
CVSS3: 7.5
debian
8 дней назад
Thumbor is an open-source photo thumbnail service by globo.com. Prior ...
CVSS3: 7.5
github
8 дней назад
Thumbor has Regex Denial of Service (ReDoS) in `convolution` filter
EPSS
Процентиль: 26%
0.00335
Низкий
7.5 High
CVSS3
Дефекты
CWE-400