CVE-2021-21252 – jquery.validation

Package

Manager: nuget
Name: jquery.validation
Vulnerable Version: >=0 <1.19.3

Severity

Level: High

CVSS v3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

EPSS: 0.0042 pctl0.61148

Details

Regular Expression Denial of Service in jquery-validation The GitHub Security Lab team has identified potential security vulnerabilities in jquery.validation. The project contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service) This issue was discovered and reported by GitHub team member @erik-krogh (Erik Krogh Kristensen).

Metadata

Created: 2021-01-13T18:21:54Z
Modified: 2023-08-31T18:34:36Z
Source: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/01/GHSA-jxwx-85vp-gvwm/GHSA-jxwx-85vp-gvwm.json
CWE IDs: ["CWE-400"]
Alternative ID: GHSA-jxwx-85vp-gvwm
Finding: F002
Auto approve: 1