CVE-2021-32832CWE-400

ReDOS in Rocket.Chat

Medium · published August 30, 2021

CVSS v3.1
4.3
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01620 · 75.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-08-30T20:55Z
EPSS history
Timeline
  • 30 AUG 20:55Z
    ReDOS in Rocket.Chat
    cvelistv5