Description
MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.5.2
References
Could your website be exposed too?
SmartScanner can check your website for MooTools Regular Expression Denial of Service and gives you actionable findings to investigate.
Start a free scanRelated Issues
- prismjs Regular Expression Denial of Service vulnerability - CVE-2021-3801
- Regular Expression Denial of Service (ReDOS) - color-string - CVE-2021-29060
- CKEditor 5 Markdown plugin Regular expression Denial of Service - CVE-2021-21254
- uri-template-lite Regular Expression Denial of Service - CVE-2021-43309
You might also like:
See something that needs correcting? Let us knowUpdated April 02, 2024