CVE-2021-23446

Katalog CVE

CVSS 7.5 · High EPSS 3,0%

Kerentanan Inefficient Regular Expression Complexity pada handsontable. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

The package handsontable before 10.0.0; the package handsontable from 0 and before 10.0.0 are vulnerable to Regular Expression Denial of Service (ReDoS) in Handsontable.helper.isNumeric function.

Rincian

Terbit di NVD

29 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

3,0% peluang dieksploitasi; lebih tinggi dari 86,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/handsontable/handsontable/pull/8742 patch · advisory pihak ketiga
• https://github.com/handsontable/handsontable/issues/8752 advisory pihak ketiga
• https://snyk.io/vuln/SNYK-DOTNET-HANDSONTABLE-1726793 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1726795 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1726796 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBHANDSONTABLE-1726794 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1726797 exploit · advisory pihak ketiga
• https://snyk.io/vuln/SNYK-JS-HANDSONTABLE-1726770 exploit · advisory pihak ketiga