CVE-2022-25927 in ua-parser-js

Riassunto

di MITRE • 26/01/2023

Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Prenotare: 24/02/2022
• Divulgazione: 26/01/2023
• Moderazione: accettato
• Voce: VDB-219272
• CPE: pronto
• CWE: CWE-1333 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01725
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-25927
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-25927
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-25927/