ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.
Weakness
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Node_email_check | Teomantuncer | 1.0.4 (including) | 1.0.4 (including) |
Potential Mitigations
Related Attack Patterns
References
- https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
- https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
- https://www.npmjs.com/package/node-email-check
- https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
- https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
- https://www.npmjs.com/package/node-email-check