CVE-2020-26304

Published at:
2024-10-26T21:15:13.673

Global infos:

Foundation is a front-end framework. Versions 6.3.3 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service (ReDoS). As of time of publication, it is unknown if any fixes are available.

CVE Status: Analyzed

References:

  • [email protected]
  • [email protected]
  • Metrics:

    AttributeValue
    Attack ComplexityLOW
    Attack VectorNETWORK
    Availability ImpactHIGH
    Base Score7.5
    Base SeverityHIGH
    Confidentiality ImpactNONE
    Integrity ImpactNONE
    Privileges RequiredNONE
    ScopeUNCHANGED
    User InteractionNONE
    Vector StringCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Exploitability Score3.9
    Impact Score3.6
    Source[email protected]
    TypePrimary

    Links:

    Exploit-db
    Github