CVE-2021-21252CWE-400

Regular expression denial of service in jquery-validation

Medium · published January 13, 2021

CVSS v3.1
5.3
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package "jquery-validation". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.03575 · 89.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-01-13T00:00Z
EPSS history
Timeline
  • 13 JAN 00:00Z
    Regular expression denial of service in jquery-validation
    cvelistv5