Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-7661

Description

all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.

POC

Reference

- https://snyk.io/vuln/SNYK-JS-URLREGEX-569472

Github

- https://github.com/0xT11/CVE-POC

- https://github.com/ARPSyndicate/cvemon

- https://github.com/NoodleOfDeath/social-bio-bot

- https://github.com/Pietruszka69/dddd

- https://github.com/beehunt9r/instagram-private-api

- https://github.com/developer3000S/PoC-in-GitHub

- https://github.com/dilame/instagram-private-api

- https://github.com/engn33r/awesome-redos-security

- https://github.com/haxzie/streamon-instagram-private-api

- https://github.com/hectorgie/PoC-in-GitHub

- https://github.com/monokaijs/instagram-private-api-rn

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/ocavue/url-regex-unsafe

- https://github.com/remygin/ipa

- https://github.com/samirxpikachuio/IGPA-NEW

- https://github.com/soosmile/POC

- https://github.com/spamscanner/url-regex-safe

- https://github.com/wdwdwd01/ipa