CVE-2020-26302

is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop “forever." This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/arasatasaygin/is.js/issues/320	Issue Tracking Third Party Advisory
https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js	Exploit Third Party Advisory
https://github.com/arasatasaygin/is.js/issues/320	Issue Tracking Third Party Advisory
https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:is.js_project:is.js:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:19

Type	Values Removed	Values Added
Summary		(es) is.js es una librería de verificación de uso general. Las versiones 0.9.0 y anteriores contienen una o más expresiones regulares que son vulnerables a la denegación de servicio de expresión regular (ReDoS). is.js utiliza una expresión regular copiada y pegada de una esencia para validar las URL. Intentar validar una cadena maliciosa puede hacer que la expresión regular se repita "forever". Esta vulnerabilidad se encontró mediante una consulta CodeQL que identifica expresiones regulares ineficientes. is.js no tiene ningún parche para este problema.
References	~~() https://github.com/arasatasaygin/is.js/issues/320 - Issue Tracking, Third Party Advisory~~	() https://github.com/arasatasaygin/is.js/issues/320 - Issue Tracking, Third Party Advisory
References	~~() https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js - Exploit, Third Party Advisory~~	() https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js - Exploit, Third Party Advisory

Information

Published : 2022-12-22 21:15

Updated : 2024-11-21 05:19

NVD link : CVE-2020-26302

Mitre link : CVE-2020-26302

CVE.ORG link : CVE-2020-26302

JSON object : View

Products Affected

is.js_project

is.js

CWE

CWE-400

Uncontrolled Resource Consumption

CWE-1333

Inefficient Regular Expression Complexity

{"id": "CVE-2020-26302", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-12-22T21:15:08.877", "references": [{"url": "https://github.com/arasatasaygin/is.js/issues/320", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js", "tags": ["Exploit", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/arasatasaygin/is.js/issues/320", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://securitylab.github.com/advisories/GHSL-2020-295-redos-is.js", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-400"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "is.js is a general-purpose check library. Versions 0.9.0 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). is.js uses a regex copy-pasted from a gist to validate URLs. Trying to validate a malicious string can cause the regex to loop \u201cforever.\" This vulnerability was found using a CodeQL query which identifies inefficient regular expressions. is.js has no patch for this issue."}, {"lang": "es", "value": "is.js es una librer\u00eda de verificaci\u00f3n de uso general. Las versiones 0.9.0 y anteriores contienen una o m\u00e1s expresiones regulares que son vulnerables a la denegaci\u00f3n de servicio de expresi\u00f3n regular (ReDoS). is.js utiliza una expresi\u00f3n regular copiada y pegada de una esencia para validar las URL. Intentar validar una cadena maliciosa puede hacer que la expresi\u00f3n regular se repita \"forever\". Esta vulnerabilidad se encontr\u00f3 mediante una consulta CodeQL que identifica expresiones regulares ineficientes. is.js no tiene ning\u00fan parche para este problema."}], "lastModified": "2024-11-21T05:19:48.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:is.js_project:is.js:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB03F6BF-42D8-4F49-B419-972FBF5CC3B7", "versionEndIncluding": "0.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}

7.5 /10