Vulnerability Details CVE-2021-32821
MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnerable to Regular Expression Denial of Service (ReDoS). An attack requires that an attacker can inject a string into a CSS selector at runtime, which is quite common with e.g. jQuery CSS selectors. No patches are available for this issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.8%
CVSS Severity
CVSS v3 Score 6.2
References
Products affected by CVE-2021-32821
-
cpe:2.3:a:mootools:mootools:-
-
cpe:2.3:a:mootools:mootools:0.87
-
cpe:2.3:a:mootools:mootools:1.1.0
-
cpe:2.3:a:mootools:mootools:1.1.1
-
cpe:2.3:a:mootools:mootools:1.1.2
-
cpe:2.3:a:mootools:mootools:1.2
-
cpe:2.3:a:mootools:mootools:1.2.0
-
cpe:2.3:a:mootools:mootools:1.2.1
-
cpe:2.3:a:mootools:mootools:1.2.2
-
cpe:2.3:a:mootools:mootools:1.2.3
-
cpe:2.3:a:mootools:mootools:1.2.4
-
cpe:2.3:a:mootools:mootools:1.2.5
-
cpe:2.3:a:mootools:mootools:1.2.6
-
cpe:2.3:a:mootools:mootools:1.3
-
cpe:2.3:a:mootools:mootools:1.3.1
-
cpe:2.3:a:mootools:mootools:1.3.2
-
cpe:2.3:a:mootools:mootools:1.4.0
-
cpe:2.3:a:mootools:mootools:1.4.1
-
cpe:2.3:a:mootools:mootools:1.4.2
-
cpe:2.3:a:mootools:mootools:1.4.3
-
cpe:2.3:a:mootools:mootools:1.4.4
-
cpe:2.3:a:mootools:mootools:1.4.5
-
cpe:2.3:a:mootools:mootools:1.5.0
-
cpe:2.3:a:mootools:mootools:1.5.1
-
cpe:2.3:a:mootools:mootools:1.5.2
-
cpe:2.3:a:mootools:mootools:1.6.0