摘要:
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
安全等级: Low
公告ID: KylinSec-SA-2023-1030
发布日期: 2023年2月6日
关联CVE: CVE-2022-25927
Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.
| cve名称 | 产品 | 组件 | 是否受影响 |
|---|---|---|---|
| CVE-2022-25927 | KY3.4-4A | cockpit | Unaffected |
| CVE-2022-25927 | KY3.4-5 | cockpit | Unaffected |
| CVE-2022-25927 | KY3.5.1 | cockpit | Unaffected |
| CVE-2022-25927 | KY3.5.2 | cockpit | Unaffected |
