QwikSec

Security Database

CVE

CWE

Training

CVE-2021-21252

Published: Jan 13, 2021

Modified: Aug 3, 2024

PUBLISHED

CVSS v3.1

5.3

MEDIUM

Description

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.

Vendor	Product	Versions
jquery-validation	jquery-validation	affected `< 1.19.3`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

References

https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm

https://github.com/jquery-validation/jquery-validation/pull/2371

https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d

https://www.npmjs.com/package/jquery-validation

https://security.netapp.com/advisory/ntap-20210219-0005/

[debian-lts-announce] 20230831 [SECURITY] [DLA 3551-1] otrs2 security update

mailing-list

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.