CVE-2020-36320CWE-400

Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7

High · published April 23, 2021

CVSS v3.1
7.5
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01956 · 80.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-04-23T16:05Z
EPSS history
Timeline
  • 23 APR 16:05Z
    Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7
    cvelistv5