Fallos del tipo CWE-1333

484 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex mal construída que, em casos adversários, força o mecanismo de busca a testar um número exponencial de combinações antes de decidir se há match. Isso consome CPU descontroladamente e pode derrubar a aplicação com um padrão de entrada pequeno e cuidadosamente crafted.

Ejemplo

Um formulário valida email com regex como `(a+)+b`. Se você enviar uma string com muitos 'a's e nenhum 'b' no final, o mecanismo tenta todas as formas possíveis de agrupar aqueles 'a's antes de falhar, gastando segundos ou minutos em uma entrada de 30 caracteres.

Cómo mitigar

Evite quantificadores aninhados (tipo `(x+)+`, `(x*)*`), use âncoras e alternativas específicas, e defina timeouts para execução de regex. Teste com ferramentas como regex101 ou Regex Tester e considere parsing estruturado em vez de regex quando possível.

CVE-2022-31147HIGHjquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306EPSS 2.2%CVE-2021-3803HIGHInefficient Regular Expression Complexity in fb55/nth-checkEPSS 2.2%CVE-2024-6232HIGHRegular-expression DoS when parsing TarFile headersEPSS 2.2%CVE-2022-29158—Regular Expression Denial of Service (ReDoS) vulnerability in Apache OFBizEPSS 2.2%CVE-2017-20165LOWdebug-js debug node.js useColors redosEPSS 2.1%CVE-2022-42969MEDIUMThe py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a SubvEPSS 2.1%CVE-2024-26146MEDIUMPossible Denial of Service Vulnerability in Rack Header ParsingEPSS 2.0%CVE-2022-25598—Apache DolphinScheduler user registration is vulnerable to ReDoS attacksEPSS 2.0%CVE-2021-43843MEDIUMInsufficient patch for Regular Expression Denial of Service (ReDoS) to jsx-slack v4.5.1EPSS 2.0%CVE-2022-31781—Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022)EPSS 2.0%CVE-2022-21222MEDIUMRegular Expression Denial of Service (ReDoS)EPSS 1.9%CVE-2024-21490HIGHThis affects versions of the package angular from 1.3.0; versions of the package angularjs from 1.3.0. A regular expression used to split thEPSS 1.9%CVE-2024-27351MEDIUMIn Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and thEPSS 1.9%CVE-2023-22467HIGHluxon.js inefficient regular expression complexity vulnerabilityEPSS 1.9%CVE-2022-23514HIGHInefficient Regular Expression Complexity in LoofahEPSS 1.8%CVE-2021-3765MEDIUMInefficient Regular Expression Complexity in validatorjs/validator.jsEPSS 1.8%CVE-2022-25927MEDIUMVersions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression DenialEPSS 1.8%CVE-2021-41115MEDIUMRegular expression denial-of-service in ZulipEPSS 1.7%CVE-2023-26115MEDIUMAll versions of the package word-wrap are vulnerable to Regular Expression Denial of Service (ReDoS) due to the usage of an insecure regularEPSS 1.7%CVE-2021-35065HIGHThe glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular eEPSS 1.7%