Open mend-for-github-com[bot] opened 2 years ago
jQuery Validation Plugin library sources
Library home page: https://github.com/jquery-validation/jquery-validation.git
Found in HEAD commit: 061d1885fe4148d27e0d62a985d4e6dbbb57d021
Found in base branch: main
/src/additional/url2.js
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
Publish Date: 2022-06-02
URL: CVE-2021-43306
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
Release Date: 2022-06-02
Fix Resolution: jquery-validation - 1.19.4
CVE-2021-43306 - Medium Severity Vulnerability
jQuery Validation Plugin library sources
Library home page: https://github.com/jquery-validation/jquery-validation.git
Found in HEAD commit: 061d1885fe4148d27e0d62a985d4e6dbbb57d021
Found in base branch: main
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method
Publish Date: 2022-06-02
URL: CVE-2021-43306
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: High - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/
Release Date: 2022-06-02
Fix Resolution: jquery-validation - 1.19.4