CVE-2018-25049lowCWE-1333

CVE-2018-25049: fallo de gravedad baja en email-existence

email-existence index.js redos

Publicada el 27 dic 2022 · Actualizada el 11 abr 2025

Seguir esta CVE + Monitorear email-existence + Monitorear email-existence

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

8Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 3epss 0.8%

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Productos afectados

n/a · email-existence

Referencias

https://github.com/nmanousos/email-existence/commit/0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56 https://github.com/nmanousos/email-existence/pull/37 https://vuldb.com/?ctiid.216854 https://vuldb.com/?id.216854