Vulnerability Details CVE-2021-45470
lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.4%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
- https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
- https://github.com/cve-search/cve-search/pull/629
- https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
- https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
- https://github.com/cve-search/cve-search/pull/629
Products affected by CVE-2021-45470
-
cpe:2.3:a:circl:cve-search:1.0
-
cpe:2.3:a:circl:cve-search:2.0
-
cpe:2.3:a:circl:cve-search:2.1
-
cpe:2.3:a:circl:cve-search:2.2
-
cpe:2.3:a:circl:cve-search:2.3
-
cpe:2.3:a:circl:cve-search:2.4
-
cpe:2.3:a:circl:cve-search:2.5
-
cpe:2.3:a:circl:cve-search:2.6
-
cpe:2.3:a:circl:cve-search:2.7
-
cpe:2.3:a:circl:cve-search:2.8
-
cpe:2.3:a:circl:cve-search:2.9
-
cpe:2.3:a:circl:cve-search:3.0
-
cpe:2.3:a:circl:cve-search:4.0