CVE-2021-43306

Summary

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the jquery-validation npm package, when an attacker is able to supply arbitrary input to the url2 method

Affected Software

VendorProductVersion RangeStatus
jquery-validationjquery-validationunspecified < 1.19.4affected

Weaknesses

  • CWE-1333: CWE-1333 Inefficient Regular Expression Complexity

ADP Enrichment

CVE Program Container

Additional References

References