Description
ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time.
Remediation
References
Related Vulnerabilities
Dotclear Improper Access Control Vulnerability (CVE-2015-8832)
WordPress Plugin WordPress Bitcoin Payments-Blockonomics Cross-Site Scripting (3.5.7)
Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2022-42129)
Plone CMS CVE-2024-23756 Vulnerability (CVE-2024-23756)
Oracle Application Server CVE-2008-0346 Vulnerability (CVE-2008-0346)