Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2020-36320

Regular expression Denial of Service (ReDoS) in EmailValidator class in Vaadin 7

Description

Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Vaadin Vaadin

  • 7.0.0 to < *affected

Vaadin vaadin-server

  • 7.0.0 to < *affected

References