In breve
- CVE-2020-1920 è una vulnerabilità ALTO (CVSS 7.5) che riguarda react-native (facebook), react-native.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 71.8% delle vulnerabilità.
- Correzione: aggiornare a 0.64.1, 0.62.3 o successiva.
| Package | Affected versions | Patched versions |
|---|
| react-native | ≥ 0.59.0, < 0.64.1
| 0.64.1
|
| react-native npm | ≥ 0.59.0, < 0.62.3≥ 0.63.0, < 0.64.1
| 0.62.30.64.1
|
Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
NVD description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free