CVE-2021-32816CWE-400

Regular expression Denial of Service in ProtonMail

Medium · published May 14, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
62.8
In the wild
Unconfirmed
What it is

ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01010 · 62.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-05-14T17:35Z
EPSS history
Timeline
  • 14 MAY 17:35Z
    Regular expression Denial of Service in ProtonMail
    cvelistv5