CVE-2021-3822
27.09.2021, 13:15
jsoneditor is vulnerable to Inefficient Regular Expression ComplexityEnginsight
| Vendor | Product | Version |
|---|---|---|
| jsoneditoronline | jsoneditor | 𝑥 < 9.5.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-1333 - Inefficient Regular Expression ComplexityThe product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
- CWE-400 - Uncontrolled Resource ConsumptionThe software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
References