CVE-2021-43306 — Exponential ReDoS in jquery-validation

CVE-2021-43306

Exponential ReDoS in jquery-validation PUBLISHED

Description (CNA)

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Affected (CNA)

Vendor / product	Versions
jquery-validation / jquery-validation	affected unspecified before 1.19.4

CWE

CWE-1333

References

https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/

ADP enrichment

CVE

No English description supplied.

https://research.jfrog.com/vulnerabilities/jquery-validation-redos-xray-211348/