Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-24373— Regular Expression Denial of Service (ReDoS)

CVSS 5.3 · Medium EPSS 0.56% · P68
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-24373

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Regular Expression Denial of Service (ReDoS)
Source: NVD (National Vulnerability Database)
Vulnerability Description
The package react-native-reanimated before 3.0.0-rc.1 are vulnerable to Regular Expression Denial of Service (ReDoS) due to improper usage of regular expression in the parser of Colors.js.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
react-native-reanimated 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
react-native-reanimated是Software Mansion开源的一个 React Native 的动画库重新实现。 react-native-reanimated 3.0.0-rc.1之前版本存在资源管理错误漏洞，该漏洞源于Colors.js解析器不正确使用正则表达式。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-react-native-reanimated unspecified ~ 3.0.0-rc.1 -

II. Public POCs for CVE-2022-24373

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-24373

请登录查看更多情报信息。

Same Patch Batch · n/a · 2022-09-30 · 35 CVEs total

CVE-2022-212225.3 MEDIUMRegular Expression Denial of Service (ReDoS)
CVE-2022-41846Bento4 安全漏洞
CVE-2022-40274Gridea 安全漏洞
CVE-2022-41440Billing System Project SQL注入漏洞
CVE-2022-41439Billing System Project SQL注入漏洞
CVE-2022-41437Billing System Project 代码问题漏洞
CVE-2022-37461Canon Medical Vitrea View 跨站脚本漏洞
CVE-2022-41848Linux kernel 资源管理错误漏洞
CVE-2022-41845Bento4 安全漏洞
CVE-2022-40277Joplin 输入验证错误漏洞
CVE-2022-41847Bento4 安全漏洞
CVE-2022-41841Bento4 代码问题漏洞
CVE-2022-41842XPDF 缓冲区错误漏洞
CVE-2022-41843XPDF 代码问题漏洞
CVE-2022-41844XPDF 缓冲区错误漏洞
CVE-2022-41849Linux kernel 资源管理错误漏洞
CVE-2022-41850Linux kernel 资源管理错误漏洞
CVE-2021-33354HTMLy 路径遍历漏洞
CVE-2022-40341mojoPortal 代码问题漏洞
CVE-2022-40923LIEF 安全漏洞

Showing top 20 of 35 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: n/a

V. Comments for CVE-2022-24373

No comments yet

Leave a comment