CVE-2020-36661

    Dashboard / Vulnerabilities / CVE-2020-36661

    CVE-2020-36661

    Published: 12 Feb 2023Last Modified: 20 Oct 2026

    Summary:

    Details: A vulnerability was found in Kong lua-multipart 0.5.8-1. It has been declared as problematic. This vulnerability affects the function is_header of the file src/multipart.lua. The manipulation leads to inefficient regular expression complexity. Upgrading to version 0.5.9-1 is able to address this issue. The patch is identified as d632e5df43a2928fd537784a99a79dec288bf01b. It is recommended to upgrade the affected component. VDB-220642 is the identifier assigned to this vulnerability.

    References: https://vuldb.com/?id.220642, https://vuldb.com/?ctiid.220642, https://github.com/Kong/lua-multipart/commit/d632e5df43a2928fd537784a99a79dec288bf01b, https://github.com/Kong/lua-multipart/pull/34, https://github.com/Kong/lua-multipart/releases/tag/0.5.9-1

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- ce365f63cf9a9f31e8e12bacc75f4e3b6e91f756
    Fixed -None

    Affected versions

    0.5.8-1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-36661 | CVE-DB