CVE-2021-4437

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-4437
A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The manipulation leads to inefficient regular expression complexity. Upgrading to version 1.1.0 is able to address this issue. The patch is identified as f689404d830cbc1edd6a1018d3334ff5f44dc6a6. It is recommended to upgrade the affected component. VDB-253406 is the identifier assigned to this vulnerability.

6.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://vuldb.com/?id.253406 Third Party Advisory
https://vuldb.com/?ctiid.253406 Permissions Required
https://github.com/dbartholomae/lambda-middleware/pull/57 Patch
https://github.com/dbartholomae/lambda-middleware/commit/f689404d830cbc1edd6a1018d3334ff5f44dc6a6 Patch
https://github.com/dbartholomae/lambda-middleware/releases/tag/%40lambda-middleware%2Fframeguard_v1.1.0 Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:dbartholomae:lambda-middleware:*:*:*:*:*:*:*:*
History

11 Oct 2024, 21:57

Type Values Removed Values Added
References () https://github.com/dbartholomae/lambda-middleware/commit/f689404d830cbc1edd6a1018d3334ff5f44dc6a6 - () https://github.com/dbartholomae/lambda-middleware/commit/f689404d830cbc1edd6a1018d3334ff5f44dc6a6 - Patch
References () https://vuldb.com/?ctiid.253406 - () https://vuldb.com/?ctiid.253406 - Permissions Required
References () https://github.com/dbartholomae/lambda-middleware/releases/tag/%40lambda-middleware%2Fframeguard_v1.1.0 - () https://github.com/dbartholomae/lambda-middleware/releases/tag/%40lambda-middleware%2Fframeguard_v1.1.0 - Release Notes
References () https://github.com/dbartholomae/lambda-middleware/pull/57 - () https://github.com/dbartholomae/lambda-middleware/pull/57 - Patch
References () https://vuldb.com/?id.253406 - () https://vuldb.com/?id.253406 - Third Party Advisory
First Time Dbartholomae
Dbartholomae lambda-middleware
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.5
CPE cpe:2.3:a:dbartholomae:lambda-middleware:*:*:*:*:*:*:*:*

12 Feb 2024, 20:39

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-12 20:15

Updated : 2024-10-11 21:57

NVD link : CVE-2021-4437

Mitre link : CVE-2021-4437

JSON object : View

Products Affected

dbartholomae

  • lambda-middleware
CWE
CWE-1333

Inefficient Regular Expression Complexity