CVE-2022-25887: Regular Expression Denial of Service (ReDoS)
First published: Tue Aug 30 2022(Updated: )
Node.js sanitize-html module is vulnerable to a denial of service, caused by insecure global regular expression replacement logic of HTML comment removal. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to cause a Regular Expression Denial of Service (ReDoS).
Credit: report@snyk.io report@snyk.io report@snyk.io
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apostrophecms Sanitize-html | <2.7.1 | |
| IBM Cloud Pak for Business Automation | <=V22.0.2 | |
| IBM Cloud Pak for Business Automation | <=V21.0.3 - V21.0.3-IF016 | |
| IBM Cloud Pak for Business Automation | <=V22.0.1 - V22.0.1-IF006 and later fixes V21.0.2 - V21.0.2-IF012 and later fixesV21.0.1 - V21.0.1-IF007 and later fixesV20.0.1 - V20.0.3 and later fixesV19.0.1 - V19.0.3 and later fixesV18.0.0 - V18.0.2 and later fixes | |
| redhat/sanitize-html | <2.7.1 | 2.7.1 |
| npm/sanitize-html | <2.7.1 | 2.7.1 |
| <2.7.1 |
Remedy
https://github.com/apostrophecms/sanitize-html/commit/b4682c12fd30e12e82fa2d9b766de91d7d2cd23c
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/apostrophecms/sanitize-html/commit/b4682c12fd30e12e82fa2d9b766de91d7d2cd23c
- https://github.com/apostrophecms/sanitize-html/pull/557
- https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-3008102
- https://security.snyk.io/vuln/SNYK-JS-SANITIZEHTML-2957526
- https://www.cve.org/CVERecord?id=CVE-2022-25887 https://nvd.nist.gov/vuln/detail/CVE-2022-25887
- https://bugzilla.redhat.com/show_bug.cgi?id=2123376
- https://access.redhat.com/errata/RHSA-2022:7313
- https://access.redhat.com/security/cve/cve-2022-25887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/234863
- https://www.ibm.com/support/pages/node/6857999 (Advisory)
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2123458
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2123457
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2123459
- https://nvd.nist.gov/vuln/detail/CVE-2022-25887
- https://github.com/advisories/GHSA-cgfm-xwp7-2cvr (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-25887.
What is the severity of CVE-2022-25887?
The severity of CVE-2022-25887 is high with a CVSS score of 7.5.
Which software packages are affected by CVE-2022-25887?
The sanitize-html package before version 2.7.1 is affected by CVE-2022-25887.
What is the impact of CVE-2022-25887?
CVE-2022-25887 can be exploited by a remote attacker to cause a Regular Expression Denial of Service (ReDoS).
How can I fix CVE-2022-25887?
To fix CVE-2022-25887, update the sanitize-html package to version 2.7.1 or later.
- collector/nvd-api
- collector/redhat-cve
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/remedy
- agent/weakness
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2022-25887
- agent/software-canonical-lookup
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-cgfm-xwp7-2cvr
- agent/severity
- agent/references
- agent/author
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- collector/github-advisory
- collector/ibm-support
- source/IBM
- agent/title
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- vendor/apostrophecms
- canonical/apostrophecms sanitize-html
- package-manager/redhat
- package-manager/npm
- vendor/ibm
- canonical/ibm cloud pak for business automation
- version/ibm cloud pak for business automation/v22.0.2
- version/ibm cloud pak for business automation/v21.0.3 - v21.0.3-if016
- version/ibm cloud pak for business automation/v22.0.1 - v22.0.1-if006 and later fixes v21.0.2 - v21.0.2-if012 and later fixesv21.0.1 - v21.0.1-if007 and later fixesv20.0.1 - v20.0.3 and later fixesv19.0.1 - v19.0.3 and later fixesv18.0.0 - v18.0.2 and later fixes