ua-parser-js Regular Expression Denial of Service vulnerability

ALTO 7.5CVE-2020-7793 · GHSA-394c-5j6w-4xmx · Published 11/12/2020 · updated 17/06/2026

In breve

CVE-2020-7793 è una vulnerabilità ALTO (CVSS 7.5) che riguarda sinec ins (siemens), ua-parser-js (ua-parser-js project), ua-parser-js.
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.9%, superiore al 90.4% delle vulnerabilità.
Correzione: aggiornare a 1.0, 0.7.23 o successiva.

Package	Affected versions	Patched versions
sinec ins siemens	`= 1.0< 1.0`	`1.0`
ua-parser-js ua-parser-js_project	`< 0.7.23`	`0.7.23`
ua-parser-js npm	`< 0.7.23`	`0.7.23`

Description

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

NVD description

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

References

nvd.nist.gov/vuln/detail/CVE-2020-7793 · ADVISORY
faisalman/ua-parser-js commit 6d1f26d · WEB
cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf · WEB
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388 · WEB
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050387 · WEB
snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599 · WEB

Altre vulnerabilità di sinec ins

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

sinec ins

siemens

= 1.0< 1.0

1.0

ua-parser-js

ua-parser-js_project

< 0.7.23

0.7.23

ua-parser-js

npm

< 0.7.23

0.7.23

Description

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

NVD description

The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).

Altre vulnerabilità di sinec ins

Vedi tutto →