CVE-2021-4305lowCWE-1333

CVE-2021-4305: low-severity vulnerability in Woorank robots-txt-guard

Woorank robots-txt-guard patterns.js makePathPattern redos

Published 05 Jan 2023 · Updated 25 Nov 2024

Follow this CVE + Monitor robots-txt-guard + Monitor robots-txt-guard

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 3.5epss 1.0%

A vulnerability was found in Woorank robots-txt-guard. It has been rated as problematic. Affected by this issue is the function makePathPattern of the file lib/patterns.js. The manipulation of the argument pattern leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. The name of the patch is c03827cd2f9933619c23894ce7c98401ea824020. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217448.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Woorank · robots-txt-guard

References

https://github.com/Woorank/robots-txt-guard/commit/c03827cd2f9933619c23894ce7c98401ea824020 https://github.com/Woorank/robots-txt-guard/pull/4 https://vuldb.com/?ctiid.217448 https://vuldb.com/?id.217448