CVE-2020-26311
GHSL-2020-312: Regular Expression Denial of Service (ReDoS) in useragent
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.7EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Oct 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Useragent is a user agent parser for Node.js. All versions as of time of publication contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, no patches are available.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Green
Affected products
3rd-Eden · useragentWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →