PT-2021-18053
CVE-2021-29061
·
Published
2021-06-21
·
Updated
2022-01-06
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Vfsjfilechooser2 versions 0.2.9 and below
Description:
A Regular Expression Denial of Service (ReDOS) issue was discovered, occurring when the application attempts to validate crafted URIs.
Recommendations:
For Vfsjfilechooser2 versions 0.2.9 and below, consider updating to a version above 0.2.9 to resolve the issue.
As a temporary workaround, consider restricting the validation of URIs to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾