| 标题 | Regular expression Denial of Service in mootools |
|---|
| 描述 | The tool mootools contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). The tested version was the latest commit at the time of reporting (December 21, 2020). The attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen). CVE-2021-32821 was assigned, the current maintainer sent an update informing they’re treating this issue as a wontfix due to low impact and lack of activity on the project |
|---|
| 来源 | ⚠️ https://securitylab.github.com/advisories/GHSL-2020-345-redos-mootools/ |
|---|
| 用户 | misc (UID 3) |
|---|
| 提交 | 2021-07-07 07時08分 (5 年前) |
|---|
| 管理 | 2021-07-07 08時16分 (1 hour later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 178008 [mootools 权限提升] |
|---|
| 积分 | 20 |
|---|