ID CVE-2020-7779
Summary All versions of package djvalidator are vulnerable to Regular Expression Denial of Service (ReDoS) by sending crafted invalid emails - for example, --@------------------------------------------------------------------------------------------------------------------------!.
References
Vulnerable Configurations
  • cpe:2.3:a:djvalidator_project:djvalidator:*:*:*:*:*:*:*:*
    cpe:2.3:a:djvalidator_project:djvalidator:*:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 21-07-2021 - 11:39)
Impact:
Exploitability:
CWE CWE-917
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
misc https://snyk.io/vuln/SNYK-JS-DJVALIDATOR-1018709
Last major update 21-07-2021 - 11:39
Published 26-11-2020 - 11:15
Last modified 21-07-2021 - 11:39
Back to Top