Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6269
HistoryMay 10, 2018 - 7:02 a.m.

Regular Expression Denial Of Service (ReDoS)

2018-05-1007:02:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.002 Low

EPSS

Percentile

51.5%

spring-messaging is vulnerable to regular expression denial of service (ReDoS) attacks. A malicious user can pass a message to an in-memory STOMP broker that can cause a ReDoS.