Description
The pcre_compile function in pcre_compile.c in PCRE before 8.38 mishandles certain [: nesting, which allows remote attackers to cause a denial of service (CPU consumption) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Books Gallery Security Bypass (3.5)
WordPress 4.3.x Denial of Service Vulnerability (4.3 - 4.3.15)
WordPress 5.6.x Multiple Vulnerabilities (5.6 - 5.6.4)
Joomla CVE-2021-23132 Vulnerability (CVE-2021-23132)
WordPress Plugin Direct Download for Woocommerce Arbitrary File Download (1.15)