Description

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Remediation

References

https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/

Related Vulnerabilities

CVE-2023-27095 Vulnerability in maven package cn.hippo4j:hippo4j-core

CVE-2013-1814 Vulnerability in maven package org.apache.rave:rave-web

CVE-2022-39135 Vulnerability in maven package org.apache.calcite:calcite-core

CVE-2023-29216 Vulnerability in maven package org.apache.linkis:linkis-common

CVE-2018-11698 Vulnerability in npm package node-sass

Severity

High

Classification

CWE-1333 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Third Party Advisory