| タイトル | Regular expression Denial of Service in mootools |
|---|
| 説明 | The tool mootools contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). The tested version was the latest commit at the time of reporting (December 21, 2020). The attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen). CVE-2021-32821 was assigned, the current maintainer sent an update informing they’re treating this issue as a wontfix due to low impact and lack of activity on the project |
|---|
| ソース | ⚠️ https://securitylab.github.com/advisories/GHSL-2020-345-redos-mootools/ |
|---|
| ユーザー | misc (UID 3) |
|---|
| 送信 | 2021年07月07日 07:08 (5 年 ago) |
|---|
| モデレーション | 2021年07月07日 08:16 (1 hour later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 178008 [mootools 特権昇格] |
|---|
| ポイント | 20 |
|---|