CVE-2021-45470

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 58%
VendorProductVersion
circlcve-search
𝑥
< 4.1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/pull/629
https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/pull/629