CVE-2020-1920GHSA-7F53-FMMV-MFJV
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive reso
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.62.3, 0.64.1
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A regular expression denial of service (ReDoS) vulnerability in the validateBaseUrl function can cause the application to use excessive resources, become unresponsive, or crash. This was introduced in react-native version 0.59.0 and fixed in version 0.64.1.
Timeline
- CVE published
- Record last updated
Affected versions
- Facebook react-native
From 0.59.0
- react-nativenpm
From 0.59.0 · fixed in 0.62.3
- react-nativenpm
From 0.63.0 · fixed in 0.64.1