En bref
- CVE-2020-1920 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant react-native (facebook), react-native.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.4%, plus élevée que 71.8% des vulnérabilités.
- Correctif : mettre à jour vers 0.64.1, 0.62.3 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| react-native | ≥ 0.59.0, < 0.64.1
| 0.64.1
|
| react-native npm | ≥ 0.59.0, < 0.62.3≥ 0.63.0, < 0.64.1
| 0.62.30.64.1
|
Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
NVD description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free