PT-2020-7757
CVE-2014-8881
·
تاريخ النشر
2020-09-01
·
تاريخ التحديث
2020-09-01
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions
bleach (affected versions not specified)
Description
The issue concerns a regular expression denial of service attack that can occur when certain types of input are passed into the
sanitize function.Recommendations
To mitigate this issue, consider using an alternative module that is actively maintained and provides similar functionality.
As a temporary workaround, consider restricting the use of the
sanitize function until an alternative solution is implemented. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾