Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-36649

Опубликовано: 11 янв. 2023
Источник: ubuntu
Приоритет: negligible
EPSS Низкий
CVSS2: 2.3
CVSS3: 3.5

Описание

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218004.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

esm-apps/bionic

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

focal

ignored

end of standard support, was needs-triage
jammy

needs-triage

kinetic

ignored

end of life, was needs-triage
lunar

ignored

end of life, was needs-triage

Показывать по

EPSS

Процентиль: 53%
0.00304
Низкий

2.3 Low

CVSS2

3.5 Low

CVSS3

Связанные уязвимости

CVSS3: 7.5
redhat
около 3 лет назад

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218004.

CVSS3: 3.5
nvd
около 3 лет назад

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been classified as problematic. Affected is an unknown function of the file papaparse.js. The manipulation leads to inefficient regular expression complexity. Upgrading to version 5.2.0 is able to address this issue. The name of the patch is 235a12758cd77266d2e98fd715f53536b34ad621. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218004.

CVSS3: 3.5
debian
около 3 лет назад

A vulnerability was found in mholt PapaParse up to 5.1.x. It has been ...

CVSS3: 7.5
github
больше 5 лет назад

Regular Expression Denial of Service in papaparse

EPSS

Процентиль: 53%
0.00304
Низкий

2.3 Low

CVSS2

3.5 Low

CVSS3