CVE-2021-29061

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 version 0.2.9 and below which occurs when the application attempts to validate crafted URIs.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
VendorProductVersion
vfsjfilechooser2_projectvfsjfilechooser2
𝑥
≤ 0.2.9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b
https://github.com/fracpete/vfsjfilechooser2/issues/7
https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9
https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md
https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md
https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b
https://github.com/fracpete/vfsjfilechooser2/issues/7
https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9
https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md
https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md