Kurz gesagt
- CVE-2020-1920 ist eine Schwachstelle (HOCH (CVSS 7.5)) in react-native (facebook), react-native.
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.4%, höher als bei 71.8% aller Schwachstellen.
- Abhilfe: auf 0.64.1, 0.62.3 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| react-native | ≥ 0.59.0, < 0.64.1
| 0.64.1
|
| react-native npm | ≥ 0.59.0, < 0.62.3≥ 0.63.0, < 0.64.1
| 0.62.30.64.1
|
Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
NVD description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free