Vulnerabilities > CVE-2021-45470 - Unspecified vulnerability in Circl Cve-Search

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

circl

NVD

Published: 2021-12-23

Updated: 2024-11-21

Summary

lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can lead to ReDoS (regular expression denial of service) or other impacts.

Vulnerable Configurations

Part	Description	Count
Application	Circl Circl CVE Search 1.0 Circl CVE Search 2.0 Circl CVE Search 2.1 Circl CVE Search 2.2 Circl CVE Search 2.3 Circl CVE Search 2.4 Circl CVE Search 2.5 Circl CVE Search 2.6 Circl CVE Search 2.7 Circl CVE Search 2.8 Circl CVE Search 2.9 Circl CVE Search 3.0 Circl CVE Search 4.0	13

References

https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/commit/c621f9f0693a728b93ff3b964f948a1d25917207
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/compare/v4.0...v4.1.0
https://github.com/cve-search/cve-search/pull/629
https://github.com/cve-search/cve-search/pull/629