Description
Summary
Incomplete fix of CVE-2021-43306: An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method.
Recommendation
Update the jquery-validation package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.19.5
- Patched version(s): 1.19.5
References
Could your website be exposed too?
SmartScanner can check your website for jquery-validation Regular Expression Denial of Service due to arbitrary input to url2 method and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Regular expression denial of service in jquery-validation - jquery-validation - CVE-2021-43306
- Regular Expression Denial of Service in jquery-validation - CVE-2021-21252
- steal vulnerable to Regular Expression Denial of Service via input variable - CVE-2022-37260
- angular vulnerable to regular expression denial of service via the <input type="url"> element - CVE-2023-26118
You might also like:
See something that needs correcting? Let us knowUpdated January 27, 2023