~ / search / GHSA-42j4-733x-5vcf

GHSA-42j4-733x-5vcf

Regular expression denial of service (ReDoS) in EmailValidator class in Vaadin 7

Source: GitHub Advisory Database (reviewed) High CVE-2020-36320

Packages

EcosystemPackageAffectedFixed in
Maven com.vaadin:vaadin-bom >= 7.0.0.beta1, < 7.7.22 7.7.22
Maven com.vaadin:vaadin-server >= 7.0.0.beta1, < 7.7.22 7.7.22

Details

As written in the advisory (Markdown source, shown as plain text).

Unsafe validation RegEx in `EmailValidator` class in `com.vaadin:vaadin-server` versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses. - https://vaadin.com/security/cve-2020-36320

References

External links from the advisory. They lead to third-party sites.