Description (CNA)
A vulnerability classified as problematic was found in Unitech pm2 up to 6.0.6. This vulnerability affects unknown code of the file /lib/tools/Config.js. The manipulation leads to inefficient regular expression complexity. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unitech / pm2 | affected 6.0.0; affected 6.0.1; affected 6.0.2; affected 6.0.3; affected 6.0.4; affected 6.0.5; affected 6.0.6 |
CWE
CWE-1333, CWE-400
References
- https://vuldb.com/?id.311662
- https://vuldb.com/?ctiid.311662
- https://vuldb.com/?submit.585750
- https://github.com/Unitech/pm2/pull/5971
- https://gist.github.com/mmmsssttt404/407e2ffe3e0eaa393ad923a86316a385
ADP enrichment
No English description supplied.