lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.
References
Link | Resource |
---|---|
https://github.com/cve-search/cve-search/pull/629 | Exploit Patch Third Party Advisory |
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0 | Third Party Advisory |
https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207 | Patch Third Party Advisory |
Configurations
Information
Published : 2021-12-23 13:15
Updated : 2021-12-29 11:08
NVD link : CVE-2021-45470
Mitre link : CVE-2021-45470
JSON object : View
CWE
Products Affected
circl
- cve-search