Fallos del tipo CWE-1333

484 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex mal construída que, em casos adversários, força o mecanismo de busca a testar um número exponencial de combinações antes de decidir se há match. Isso consome CPU descontroladamente e pode derrubar a aplicação com um padrão de entrada pequeno e cuidadosamente crafted.

Ejemplo

Um formulário valida email com regex como `(a+)+b`. Se você enviar uma string com muitos 'a's e nenhum 'b' no final, o mecanismo tenta todas as formas possíveis de agrupar aqueles 'a's antes de falhar, gastando segundos ou minutos em uma entrada de 30 caracteres.

Cómo mitigar

Evite quantificadores aninhados (tipo `(x+)+`, `(x*)*`), use âncoras e alternativas específicas, e defina timeouts para execução de regex. Teste com ferramentas como regex101 ou Regex Tester e considere parsing estruturado em vez de regex quando possível.

CVE-2023-26103MEDIUMVersions of the package deno before 1.31.0 are vulnerable to Regular Expression Denial of Service (ReDoS) due to the upgradeWebSocket functiEPSS 1.2%CVE-2021-3794HIGHInefficient Regular Expression Complexity in vuelidate/vuelidateEPSS 1.2%CVE-2021-3649HIGHInefficient Regular Expression Complexity in chatwoot/chatwootEPSS 1.2%CVE-2021-3820MEDIUMInefficient Regular Expression Complexity in pksunkara/inflectEPSS 1.2%CVE-2023-33289HIGHThe urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the SupplierEPSS 1.2%CVE-2022-2908MEDIUMA potential DoS vulnerability was discovered in Gitlab CE/EE versions starting from 10.7 before 15.1.5, all versions starting from 15.2 befoEPSS 1.2%CVE-2022-42966MEDIUMExponential ReDoS in cleo leads to denial of serviceEPSS 1.2%CVE-2023-30858MEDIUMDenosaurs emoji has ReDoS vulnerability in `replace` function EPSS 1.2%CVE-2023-24038HIGHThe HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking for HTML content withEPSS 1.1%CVE-2023-34104HIGHRegex Injection via Doctype EntitiesEPSS 1.1%CVE-2024-10624HIGHRegular Expression Denial of Service (ReDoS) in gradio-app/gradioEPSS 1.1%CVE-2021-43308MEDIUMExponential ReDoS in markdown-link-extractorEPSS 1.1%CVE-2019-25102MEDIUMsimple-markdown simple-markdown.js redosEPSS 1.1%CVE-2024-45338MEDIUMNon-linear parsing of case-insensitive content in golang.org/x/net/htmlEPSS 1.1%CVE-2017-20162MEDIUMvercel ms index.js parse redosEPSS 1.1%CVE-2024-47887MEDIUMAction Controller has possible ReDoS vulnerability in HTTP Token authenticationEPSS 1.0%CVE-2021-3801HIGHInefficient Regular Expression Complexity in prismjs/prismEPSS 1.0%CVE-2023-32758HIGHgiturlparse (aka git-url-parse) through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS (Regular Expression Denial ofEPSS 1.0%CVE-2023-29486CRITICALAn issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictionsEPSS 1.0%CVE-2018-25061MEDIUMrgb2hex redosEPSS 1.0%