Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2022-37599

Published: 11/10/2022 Updated: 28/02/2024
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Webpack.js

Vulnerability Summary

A Regular expression denial of service (ReDoS) flaw was found in Function interpolateName in interpolateName.js in webpack loader-utils 2.0.0 via the resourcePath variable in interpolateName.js.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webpack.js loader-utils

Vendor Advisories

Red Hat: Important: Red Hat Process Automation Manager 7.13.4 security update
Synopsis Important: Red Hat Process Automation Manager 7134 security update Type/Severity Security Advisory: Important Topic An update is now available for Red Hat Process Automation ManagerRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) base score, which ...

Github Repositories

https://github.com/TomasiDeveloping/ExpensesTracker

Web-based app to manage its income and expenses.

ExpensesTracker Angular 17 with NET 8 Rest API Home Add Expense Expenses Categories Statistics Excel Example Settings Changelog 341 (2024-01-28) Update NuGet Packages Update NPM Security fix 340 (2023-11-25) Update to Angular version 17 NPM packages update Security fix 330 (2023-11-19) Security Update Update to NET 8 Refactoring 3

References

CWE-1333https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L38https://github.com/webpack/loader-utils/issues/211https://github.com/webpack/loader-utils/blob/d9f4e23cf411d8556f8bac2d3bf05a6e0103b568/lib/interpolateName.js#L83https://github.com/webpack/loader-utils/issues/216https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PVVPNSAGSDS63HQ74PJ7MZ3MU5IYNVZ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3HUE6ZR5SL73KHL7XUPAOEL6SB7HUDT2/https://access.redhat.com/errata/RHSA-2023:4983https://nvd.nist.govhttps://github.com/TomasiDeveloping/ExpensesTracker
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
cross-site request forgeryCVE-2024-34351CVE-2024-1076CVE-2024-25522CVE-2024-34547CVE-2024-4644unauthorizedremoteCVE-2024-4671
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook