CVE-2020-27511 Security Details

CVE ID

CVE-2020-27511

CWE

NVD-CWE-noinfo

CVE Description

An issue was discovered in the stripTags and unescapeHTML components in Prototype 1.7.3 where an attacker can cause a Regular Expression Denial of Service (ReDOS) through stripping crafted HTML tags.

Published

Jun 21, 2021

CVSS Score & Severity

7.5High

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

1.193%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

https://github.com/yetingli/PoCs/commit/933a93eff6a8f28b1cba17e1863c8960e2acae0aATTACK

https://github.com/AlyxRen/prototype.node.jsPROJECT