Fallos del tipo CWE-1333

484 resultados

Expressão regular com complexidade exponencial (ReDoS)

A aplicação usa uma regex mal construída que, em casos adversários, força o mecanismo de busca a testar um número exponencial de combinações antes de decidir se há match. Isso consome CPU descontroladamente e pode derrubar a aplicação com um padrão de entrada pequeno e cuidadosamente crafted.

Ejemplo

Um formulário valida email com regex como `(a+)+b`. Se você enviar uma string com muitos 'a's e nenhum 'b' no final, o mecanismo tenta todas as formas possíveis de agrupar aqueles 'a's antes de falhar, gastando segundos ou minutos em uma entrada de 30 caracteres.

Cómo mitigar

Evite quantificadores aninhados (tipo `(x+)+`, `(x*)*`), use âncoras e alternativas específicas, e defina timeouts para execução de regex. Teste com ferramentas como regex101 ou Regex Tester e considere parsing estruturado em vez de regex quando possível.

CVE-2024-22363HIGHSheetJS Community Edition before 0.20.2 is vulnerable.to Regular Expression Denial of Service (ReDoS).EPSS 0.8%CVE-2025-25200CRITICALKoa has Inefficient Regular Expression ComplexityEPSS 0.8%CVE-2026-71190HIGHIn OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtrackiEPSS 0.8%CVE-2024-8763HIGHRegular Expression Denial of Service (ReDoS) in lunary-ai/lunaryEPSS 0.8%CVE-2024-8789HIGHRegular Expression Denial of Service (ReDoS) in lunary-ai/lunaryEPSS 0.8%CVE-2024-8764HIGHImproper Authorization in lunary-ai/lunaryEPSS 0.8%CVE-2024-39249HIGHAsync <= 2.6.4 and <= 3.2.5 are vulnerable to ReDoS (Regular Expression Denial of Service) while parsing function in autoinject function. NOEPSS 0.8%CVE-2024-52524MEDIUMReDoS in Giskard Scan text perturbationEPSS 0.8%CVE-2024-8998HIGHRegular Expression Denial of Service (ReDoS) in lunary-ai/lunaryEPSS 0.8%CVE-2023-3210MEDIUMInefficient Regular Expression Complexity in GitLabEPSS 0.8%CVE-2026-4926HIGHpath-to-regexp vulnerable to Denial of Service via sequential optional groupsEPSS 0.8%CVE-2020-36830MEDIUMnescalante urlregex Backtracking index.js redosEPSS 0.8%CVE-2026-68749HIGHQuadratic regex backtracking in the html_sanitize_ex CSS scrubber allows CPU-exhaustion denial of serviceEPSS 0.8%CVE-2026-52778CRITICALYesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)EPSS 0.8%CVE-2022-23548MEDIUMDiscourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta16 on the `beta` andEPSS 0.8%CVE-2025-4215LOWgorhill uBlock Origin UI 1p-filters.js currentStateChanged redosEPSS 0.8%CVE-2024-52798HIGHpath-to-regexp Unpatched `path-to-regexp` ReDoS in 0.1.xEPSS 0.8%CVE-2018-25049LOWemail-existence index.js redosEPSS 0.8%CVE-2025-25290MEDIUM@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingEPSS 0.8%CVE-2025-25283HIGHparse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memoryEPSS 0.8%