CVEDB API - Fast Vulnerability Dashboard

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-23392

The package locutus before 2.0.15 are vulnerable to Regular Expression Denial of Service (ReDoS) via the gopher_parsedir function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.3%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2021-23392

Locutus » Locutus » Version: N/A

cpe:2.3:a:locutus:locutus:-
Locutus » Locutus » Version: 1.3.2

cpe:2.3:a:locutus:locutus:1.3.2
Locutus » Locutus » Version: 2.0.0

cpe:2.3:a:locutus:locutus:2.0.0
Locutus » Locutus » Version: 2.0.1

cpe:2.3:a:locutus:locutus:2.0.1
Locutus » Locutus » Version: 2.0.10

cpe:2.3:a:locutus:locutus:2.0.10
Locutus » Locutus » Version: 2.0.11

cpe:2.3:a:locutus:locutus:2.0.11
Locutus » Locutus » Version: 2.0.12

cpe:2.3:a:locutus:locutus:2.0.12
Locutus » Locutus » Version: 2.0.13

cpe:2.3:a:locutus:locutus:2.0.13
Locutus » Locutus » Version: 2.0.14

cpe:2.3:a:locutus:locutus:2.0.14
Locutus » Locutus » Version: 2.0.2

cpe:2.3:a:locutus:locutus:2.0.2
Locutus » Locutus » Version: 2.0.3

cpe:2.3:a:locutus:locutus:2.0.3
Locutus » Locutus » Version: 2.0.4

cpe:2.3:a:locutus:locutus:2.0.4
Locutus » Locutus » Version: 2.0.5

cpe:2.3:a:locutus:locutus:2.0.5
Locutus » Locutus » Version: 2.0.6

cpe:2.3:a:locutus:locutus:2.0.6
Locutus » Locutus » Version: 2.0.7

cpe:2.3:a:locutus:locutus:2.0.7
Locutus » Locutus » Version: 2.0.8

cpe:2.3:a:locutus:locutus:2.0.8
Locutus » Locutus » Version: 2.0.9

cpe:2.3:a:locutus:locutus:2.0.9

Products

Pricing

Contact Us

support@shodan.io

Shodan ® - All rights reserved