CVE-2020-7733: Regular Expression Denial of Service (ReDoS)
A flaw was found in nodejs-ua-parser-js. The software is vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
Other sources
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-7733.
What is the severity of CVE-2020-7733?
The severity of CVE-2020-7733 is high.
Which software packages are affected by CVE-2020-7733?
The software packages affected by CVE-2020-7733 are nodejs-ua-parser-js, ovirt-engine-ui-extensions, and ovirt-web-ui.
How can I fix CVE-2020-7733?
To fix CVE-2020-7733, update nodejs-ua-parser-js package to version 0.7.22 or higher.
Where can I find more information about CVE-2020-7733?
More information about CVE-2020-7733 can be found at the following references: [Link 1](https://github.com/faisalman/ua-parser-js/commit/233d3bae22a795153a7e6638887ce159c63e557d), [Link 2](https://snyk.io/vuln/SNYK-JS-UAPARSERJS-610226), [Link 3](https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-674665)