Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2020-7754
PUBLISHED
More InfoOfficial Page
Assigner-snyk
Assigner Org ID-bae035ff-b466-4ff4-94d0-fc9efd9e1730
View Known Exploited Vulnerability (KEV) details
Published At-27 Oct, 2020 | 15:05
Updated At-17 Sep, 2024 | 04:28
Rejected At-
▼CVE Numbering Authority (CNA)
Regular Expression Denial of Service (ReDoS)

This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters.

Affected Products
Vendor
n/a
Product
npm-user-validate
Versions
Affected
  • From unspecified before 1.0.1 (custom)
Problem Types
TypeCWE IDDescription
textN/ARegular Expression Denial of Service (ReDoS)
Type: text
CWE ID: N/A
Description: Regular Expression Denial of Service (ReDoS)
Metrics
VersionBase scoreBase severityVector
3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Yeting Li
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352
x_refsource_MISC
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
x_refsource_MISC
https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
x_refsource_MISC
https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352
Resource:
x_refsource_MISC
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
Resource:
x_refsource_MISC
Hyperlink: https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
Resource:
x_refsource_MISC
Hyperlink: https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352
x_refsource_MISC
x_transferred
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
x_refsource_MISC
x_transferred
https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
x_refsource_MISC
x_transferred
https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JS-NPMUSERVALIDATE-1019352
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1019353
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/npm/npm-user-validate/security/advisories/GHSA-xgh6-85xh-479p
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/npm/npm-user-validate/commit/c8a87dac1a4cc6988b5418f30411a8669bef204e
Resource:
x_refsource_MISC
x_transferred
Details not found