CVE-2022-31147

Name of the Vulnerable Software and Affected Versions jquery-validation versions prior to 1.19.5

Description The issue is related to the incorrect handling of regular expressions in the url2 method of the jQuery Validation Plugin, which can lead to a denial of service when an attacker supplies arbitrary input. This is due to an incomplete fix for a previous issue. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include the url2 method, which is vulnerable to regular expression denial of service (ReDoS) attacks when an attacker can supply arbitrary input.

Recommendations For versions prior to 1.19.5, upgrade to version 1.19.5 to receive a patch. As a temporary workaround, consider restricting access to the url2 method to minimize the risk of exploitation.