Vulnerability identifier: #VU55315
Vulnerability risk: Medium
Exploitation vector: Network
Exploit availability: No
Web applications / JS libraries
Vendor: Javier Blanco Gutiérrez
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient input validation in splitDeviceRe, splitTailRe, and splitPathRe regular expressions. A remote attacker can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability..
Vulnerable software versions
path-parse: 1.0.0 - 1.0.6
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?