CVE-2018-20801 Regular Expression Denial of Service in highcharts
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In js/parts/SvgRenderer.js in Highcharts JS before 6.1.0, the use of backtracking regular expressions permitted an attacker to conduct a denial of service attack against the SVGRenderer component, aka ReDoS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm highcharts(npm) | < 6.1.0 | 6.1.0 |
| @highcharts highcharts | < 6.1.0 | 6.1.0 |
References
- nvd.nist.gov third-party-advisory
- github.com patch third-party-advisory
- github.com
- www.npmjs.com
- snyk.io exploit third-party-advisory
- security.netapp.com