CVE Feed

    Dashboard / CVE / CVE-2021-23425

    CVE-2021-23425

    All versions of package trim-off-newlines are vulnerable to Regular Expression Denial of Service (ReDoS) via string processing.

    Published:May 26, 2021
    Last Modified:Nov 21, 2024
    EPS:Aug 18, 2021
    EPSS Score:0.00364
    CVSS Score:5.3

    Affected Products

    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Trim-off-newlines Project
    Product
    Trim-off-newlines

    Exploits

    https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567197https://snyk.io/vuln/SNYK-JS-TRIMOFFNEWLINES-1296850https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567197https://snyk.io/vuln/SNYK-JS-TRIMOFFNEWLINES-1296850

    Related CVEs

    CVE-2024-0822 (CVSS 7.5) — An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in th…
    CVE-2023-20861 (CVSS 6.5) — In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsuppor…
    CVE-2023-20860 (CVSS 7.5) — Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security co…
    CVE-2022-41946 (CVSS 4.7) — pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `Prepa…
    CVE-2022-45047 (CVSS 9.8) — Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java…
    CVE-2022-31129 (CVSS 7.5) — moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected vers…
    CVE-2022-31051 (CVSS 4.4) — semantic-release is an open source npm package for automated version management and package publishing. In aff…
    CVE-2022-2806 (CVSS 5.5) — It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-…
    CVE-2022-2805 (CVSS 6.5) — A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using…
    CVE-2022-24903 (CVSS 8.1) — Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High