Missing Function Level Access Control in Mozilla formula containsRegular Expression Denial of Service (CVE-2023-25166)
Medium
M
Mozilla
Submitted None
Team Summary
Official summary from Mozilla
sideway/formula package which is used in https://github.com/mozilla/bedrock contains Regular Expression Denial of Service (ReDoS) Vulnerability. The issue was fixed by upgrading the package to a secure version.
Actions:
Reported by
hackeronanywhere
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Uncontrolled Resource Consumption