CVE-2021-32821

Name of the Vulnerable Software and Affected Versions MooTools versions all known versions

Description The issue concerns a CSS selector parser in MooTools that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack can occur if an attacker can inject a string into a CSS selector at runtime, a scenario that is quite common, for example, with jQuery CSS selectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.