Description
PCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote attackers to cause a denial of service (uninitialized memory read) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.
Remediation
References
Related Vulnerabilities
WordPress Plugin CYSTEME Finder, the admin files explorer Cross-Site Request Forgery (1.4)
WordPress Plugin MAC PHOTO GALLERY 'upload-file.php' Arbitrary File Upload (2.7)
Drupal Core 9.0.x Cross-Site Scripting (9.0.0 - 9.0.11)
WordPress Plugin Google Maps v3 Shortcode Cross-Site Scripting (1.2.1)
WordPress Plugin Drag and Drop Multiple File Upload-Contact Form 7 Arbitrary File Upload (1.3.3.2)