CVE-2021-3749
31.08.2021, 11:15
axios is vulnerable to Inefficient Regular Expression ComplexityEnginsight
| Vendor | Product | Version |
|---|---|---|
| axios | axios | 𝑥 ≤ 0.21.1 |
| siemens | sinec_ins | 𝑥 < 1.0 |
| siemens | sinec_ins | 1.0 |
| siemens | sinec_ins | 1.0:sp1 |
| oracle | goldengate | 21.1 ≤ 𝑥 < 21.7.0.0.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-1333 - Inefficient Regular Expression ComplexityThe product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References