CVE-2020-7733 in Communications Cloud Native Core Network Function Cloud Native Environment

الملخص

بحسب MITRE

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: Snyk
• حجز: 21/01/2020
• الاعتدال: تمت الموافقة
• إدخال: 2
• ربط: عرض
• CPE: جاهز
• CWE: CWE-404 (مؤكد)
• CVSS: 5.0 (NVD)
• EPSS: 0.04483
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Hostingprovider, Government, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7733
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7733
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7733/