Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38914
HistoryJan 19, 2023 - 1:46 a.m.

Regular Expression Denial Of Service (ReDoS)

2023-01-1901:46:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
globalid
vulnerability
redos
model parsing
processing time

EPSS

0.001

Percentile

39.0%

globalid is vulnerable to Regular Expression Denial of Service (ReDoS) attacks. The vulnerability exists in the model name parsing section of the library, which allows an attacker to significantly slow down the processing time via passing a carefully crafted input.