7.5
CVE-2022-37599
- EPSS 4%
- Veröffentlicht 11.10.2022 19:15:11
- Zuletzt bearbeitet 04.11.2025 19:15:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginloader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.
Mögliche Gegenmaßnahme
ElasticPress: Update to version 4.4.0, or a newer patched version
Insert Special Characters: Update to version 1.0.6, or a newer patched version
Restricted Site Access: Update to version 7.3.5, or a newer patched version
Simple Page Ordering: Update to version 2.4.4, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
ElasticPress
Version
* - 4.3.1
SystemWordPress Plugin
≫
Produkt
Insert Special Characters
Version
* - 1.0.5
SystemWordPress Plugin
≫
Produkt
Restricted Site Access
Version
* - 7.3.4
SystemWordPress Plugin
≫
Produkt
Simple Page Ordering
Version
* - 2.4.3
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Webpack.Js ≫ Loader-utils Version >= 1.0.0 < 1.4.2
Webpack.Js ≫ Loader-utils Version >= 2.0.0 < 2.0.4
Webpack.Js ≫ Loader-utils Version >= 3.0.0 < 3.2.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4% | 0.879 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-1333 Inefficient Regular Expression Complexity
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.