Vulnerability Details CVE-2020-7793
The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.02
EPSS Ranking 82.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050387
- https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599
- https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
- https://github.com/faisalman/ua-parser-js/commit/6d1f26df051ba681463ef109d36c9cf0f7e32b18
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBFAISALMAN-1050388
- https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1050387
- https://snyk.io/vuln/SNYK-JS-UAPARSERJS-1023599
Products affected by CVE-2020-7793
-
cpe:2.3:a:siemens:sinec_ins:-
-
cpe:2.3:a:siemens:sinec_ins:1.0
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:-
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.3.0
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.3.1
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.0
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.1
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.13
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.15
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.3
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.4
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.6
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.4.7
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.1
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.11
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.12
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.15
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.2
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.20
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.22
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.23
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.25
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.27
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.5.3
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.6.0
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.6.2
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.0
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.1
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.10
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.11
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.12
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.13
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.14
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.15
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.16
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.17
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.18
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.19
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.20
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.21
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.22
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.3
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.4
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.6
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.7
-
cpe:2.3:a:ua-parser-js_project:ua-parser-js:0.7.9