CVE-2022-1929CWE-1333

Exponential ReDoS in devcert

Medium · published June 1, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the devcert npm package, when an attacker is able to supply arbitrary input to the certificateFor method

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.3th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2022-06-01T16:47Z
EPSS history
Timeline
  • 01 JUN 16:47Z
    Exponential ReDoS in devcert
    cvelistv5