Em resumo
- CVE-2020-1920 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta react-native (facebook), react-native.
- Chance de exploração nos próximos 30 dias (EPSS): 1.4%, maior que 71.8% das vulnerabilidades.
- Correção: atualize para 0.64.1, 0.62.3 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| react-native | ≥ 0.59.0, < 0.64.1
| 0.64.1
|
| react-native npm | ≥ 0.59.0, < 0.62.3≥ 0.63.0, < 0.64.1
| 0.62.30.64.1
|
Description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
NVD description
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free