CVE-2024-4148CWE-1333

Redos (Regular Expression Denial of Service) in lunary-ai/lunary

High · published June 1, 2024

CVSS v3.0
7.5
EPSS
1%
Percentile
47.6
In the wild
Unconfirmed
What it is

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the lunary-ai/lunary application, version 1.2.10. An attacker can exploit this vulnerability by maliciously manipulating regular expressions, which can significantly impact the response time of the application and potentially render it completely non-functional. Specifically, the vulnerability can be triggered by sending a specially crafted request to the application, leading to a denial of service where the application crashes.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.6th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2024-06-01T15:54Z
EPSS history
Timeline
  • 01 JUN 15:54Z
    Redos (Regular Expression Denial of Service) in lunary-ai/lunary
    cvelistv5