PoC Index85,101 CVEs with PoCs

CVE-2020-7760

Regular Expression Denial of Service (ReDoS)

HIGH 7.5EPSS 5.3%

This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*

Affected
codemirror · org.apache.marmotta.webjars:codemirror
CVSS v3.1 NVD
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v3.1 SNYK
5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v2.0 NVD
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
5.30% chance of exploitation in the next 30 days, 93rd percentile
Published
2020-10-30
Updated
2024-09-17

Proof-of-concept exploits (7)

Security advisories

References