Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32790
HistoryNov 03, 2021 - 2:16 a.m.

Regular Expression Denial Of Service (ReDoS)

2021-11-0302:16:05
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
redos vulnerability
software
regex escape

EPSS

0.001

Percentile

46.0%

validator is vulnerable to regular expression denial of service (ReDoS). An attacker is able to slow down the application or causes an application crash via a malicious string and regex /(\s)+$/g via the rtrim function due to lack of safer regular expression to escape the string input from attacker.