Regex susceptible to ReDoS

Moderate

jomaxro published GHSA-7rw2-f4x7-7pxf

Jan 5, 2023

Package

No package listed

Affected versions

stable <= 2.8.13; beta <= 3.0.0.beta15; tests-passed <= 3.0.0.beta15

Patched versions

stable >= 2.8.14; beta >= 3.0.0.beta16; tests-passed >= 3.0.0.beta16

Description

Impact

Parsing posts can be susceptible to ReDoS attacks.

Patches

Patch has been applied.

Workarounds

Upgrading is necessary.

Severity

Moderate

6.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

Low

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H