Description
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Remediation
References
Related Vulnerabilities
MongoDb Reachable Assertion Vulnerability (CVE-2026-13073)
MySQL CVE-2017-3452 Vulnerability (CVE-2017-3452)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-7983)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.18)
WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)