Vulnerabilities > CVE-2016-10527 - Resource Management Errors vulnerability in Riot.Js Riot-Compiler 2.3.21

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
riot-js
CWE-399

Summary

The riot-compiler version version 2.3.21 has an issue in a regex (Catastrophic Backtracking) thats make it unusable under certain conditions.

Vulnerable Configurations

Part Description Count
Application
Riot.Js
1

Common Weakness Enumeration (CWE)