Description

In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.

Remediation

References

CVE-2018-20801

Related Vulnerabilities

MySQL CVE-2021-2169 Vulnerability (CVE-2021-2169)

WordPress Plugin Advanced Dynamic Pricing for WooCommerce Multiple Vulnerabilities (4.1.5)

Oracle JRE Cryptographic Issues Vulnerability (CVE-2012-2739)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-33203)

Moodle Other Vulnerability (CVE-2006-4939)

Severity

High

Classification

CVE-2018-20801 CWE-185 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities