ua-parser/uap-php · Security
ua-parser/uap-php ReDoS vulnerability
- GHSA ID
- GHSA-78hm-5hjw-58mh
- Severity
- medium
- Published
- Updated
Description
A regex expression in ua-parser/uap-php could lead to a ReDoS vulnerability in versions prior to 3.8.0.
CWEs
- CWE-1333 · Inefficient Regular Expression Complexity
References
- https://github.com/ua-parser/uap-core/pull/363 ↗
- https://github.com/ua-parser/uap-core/commit/156f7e12b215bddbaf3df4514c399d683e6cdadc ↗
- https://github.com/FriendsOfPHP/security-advisories/blob/master/ua-parser/uap-php/2018-12-14.yaml ↗
- https://github.com/ua-parser/uap-php/commit/947f80b39130c83a3d1c75900ac1b58828ed8aef ↗
- https://github.com/advisories/GHSA-78hm-5hjw-58mh ↗