Vulnerability Details CVE-2023-39619
ReDos in NPMJS Node Email Check v.1.0.4 allows an attacker to cause a denial of service via a crafted string to the scpSyntax component.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.5%
CVSS Severity
CVSS v3 Score 7.5
References
- https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
- https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
- https://www.npmjs.com/package/node-email-check
- https://gist.github.com/6en6ar/712a4c1eab0324f15e09232c77ea08f8
- https://github.com/teomantuncer/node-email-check/blob/main/main.js%2C
- https://www.npmjs.com/package/node-email-check
Products affected by CVE-2023-39619
-
cpe:2.3:a:teomantuncer:node_email_check:1.0.4