What is CVE-2021-4437?

CVE-2021-4437 is a low-severity vulnerability in Dbartholomae Lambda-Middleware, classified under Inefficient Regular Expression Complexity. CVSS score: 3.5/10. Published 2024-02-12.

How severe is CVE-2021-4437?

Low severity. CVSS v3 base score is 3.5 out of 10.

Vulnerability in Dbartholomae Lambda-Middleware

CVE-2021-4437

A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the component JSON Mime-Type Handler. The manipulation leads to inefficient regular expression complexity. Upgrading to version 1.1.0 is able to address this issue. The patch is identified as f689404d830cbc1edd6a1018d3334ff5f44dc6a6. It is recommended to upgrade the affected component. VDB-253406 is the identifier assigned to this vulnerability.

Vulnerability class: ReDoS (Regular Expression Denial of Service)

EPSS: 0.004 (36.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

Dbartholomae Lambda-middleware
Dbartholomae Lambda-middleware Frameguard — versions 1.0.0, 1.0.1, 1.0.2

Weakness classification (CWE)

CWE-1333 — Inefficient Regular Expression Complexity

References

cna@vuldb.com (Third Party Advisory, vdb-entry)
cna@vuldb.com (signature, Permissions Required, permissions-required)
cna@vuldb.com (issue-tracking, Patch)
cna@vuldb.com (Patch, patch)
cna@vuldb.com (Release Notes, patch)

Frequently asked questions

What is CVE-2021-4437?: CVE-2021-4437 is a low-severity vulnerability in Dbartholomae Lambda-Middleware, classified under Inefficient Regular Expression Complexity. CVSS score: 3.5/10. Published 2024-02-12.
How severe is CVE-2021-4437?: Low severity. CVSS v3 base score is 3.5 out of 10.