CVE-2020-7733

7.5

HIGHCVSS v3

Published

September 16, 2020

CVSS v2

5 MEDIUM

Affected

3 projects

Assigned by

[email protected]

Severity scale

010

Description

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

@types/ua-parser-js

NPMTypeScript definitions for ua-parser-js

< 0.7.22NVD

ua-parser-js

NPMDetect Browser, Engine, OS, CPU, and Device type/model from User-Agent & Client Hints data. Supports browser & node.js environment

< 0.7.22NVD

faisalman/ua-parser-js

More on this CVE

NVD↗GitHub Advisory↗

GitHub

UAParser.js - The Essential Web Development Tool for User-Agent Detection. Detect Browsers, OS, Devices, Bots, Apps, AI Crawlers, and more. Run in Browser (client-side) or Node.js (server-side).

< 0.7.22NVD

Security Advisories

CVE-2020-7733

Description

More on this CVE