CVE-2022-31147highCWE-1333

CVE-2022-31147: high-severity vulnerability in jquery-validation

jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306

Published · Updated

Follow this CVE+ Monitor jquery-validation+ Monitor jquery-validation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.2%
The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix for CVE-2021-43306. Users should upgrade to version 1.19.5 to receive a patch.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
jquery-validation · jquery-validation
Related CVEs — jquery-validation

In the same product, most dangerous first.

CVE-2021-21252MEDIUMRegular expression denial of service in jquery-validationEPSS 3.6%CVE-2021-43306MEDIUMExponential ReDoS in jquery-validationEPSS 1.5%