GHSA-c7fh-chf7-jr5x

ReDOS in Vfsjfilechooser2

Source: GitHub Advisory Database (reviewed) High CVE-2021-29061

Packages

Ecosystem	Package	Affected	Fixed in
Maven	com.github.fracpete:vfsjfilechooser2	< 0.2.9	0.2.9

Details

As written in the advisory (Markdown source, shown as plain text).

A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Vfsjfilechooser2 which occurs when the application attempts to validate crafted URIs.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-29061 advisory
https://github.com/fracpete/vfsjfilechooser2/issues/7 web
https://github.com/fracpete/vfsjfilechooser2/commit/9c9f2c317f3de5ece60a3ae28c371e9796e3909b web
https://github.com/fracpete/vfsjfilechooser2/releases/tag/vfsjfilechooser2-0.2.9 web
https://github.com/yetingli/PoCs/blob/main/CVE-2021-29061/Vfsjfilechooser2.md web
https://github.com/yetingli/SaveResults/blob/main/md/vfsjfilechooser2.md web