Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
WS-2017-0225
Good to know:
Date: July 1, 2016
Regular Expression Denial of Service (ReDoS) vulnerability was found in uikit before 2.26.4.
Language: JS
Severity Score
Severity Score
Weakness Type (CWE)
Incorrect Regular Expression
CWE-185Top Fix
Upgrade Version
Upgrade to version yurunsoft/imi - v1.3.10;yurunsoft/imi - v1.3.7;yurunsoft/imi - dev-route;yurunsoft/imi - v1.3.16;yurunsoft/imi - v2.0.8;yurunsoft/imi - dev-annotation-to-attribute;yurunsoft/imi - 1.3.0.x-dev;yurunsoft/imi - dev-componets-info;uikit - 2.26.4;bolt/bolt - v2.2.10;bolt/bolt - v3.0.3;bolt/bolt - v2.2.4;bolt/bolt - v2.2.0;bolt/bolt - v3.1.0;bolt/bolt - 3.x-dev;bolt/bolt - v2.2.14;bolt/bolt - v2.2.25;bolt/bolt - v3.0.5;bolt/bolt - v3.0.11;bolt/bolt - v2.2.19-pl1;bolt/bolt - v3.1.2;aremox/morana - no_fix;imiphp/imi - dev-disable-middleware;imiphp/imi - dev-model-alias-property;imiphp/imi - 2.0.x-dev;imiphp/imi - v1.3.12;imiphp/imi - v2.0.8;imiphp/imi - dev-route;imiphp/imi - v2.0.3;imiphp/imi - v1.3.8;webforge/cms - v1.7.1;webforge/cms - v1.5.4;id4v/menu-bundle - 1.0.0;uikit - no_fix;mata/mata-application - dev-master;ddphp/webos - no_fix;unrulynatives/helpers - 1.1.3;unrulynatives/helpers - 1.1.1;unrulynatives/helpers - 0.0.10;blazingstest - no_fix;mia3/mia3_categories - no_fix;unrulynatives/laravel-starter-kit - no_fix;org.webjars.bower:dev_uikit:no_fix;org.webjars:uikit:2.24.2;org.webjars.npm:uikit:2.26.4
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | REQUIRED |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | NONE |