What is GHSA-9pq7-rcxv-47vq?

GHSA-9pq7-rcxv-47vq is a security advisory published by GitHub Security Advisories with High severity. Incorrect Regular Expression in RestSharp

Which CVE IDs does GHSA-9pq7-rcxv-47vq cover?

GHSA-9pq7-rcxv-47vq covers the following CVE IDs: CVE-2021-27293. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9pq7-rcxv-47vq?

GHSA-9pq7-rcxv-47vq has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-9pq7-rcxv-47vq?

GHSA-9pq7-rcxv-47vq affects 1 product, including: nuget/RestSharp:\u003c= 106.11.7.

GHSA-9pq7-rcxv-47vqHighCVSS 7.5

Incorrect Regular Expression in RestSharp

Vendor

GitHub Security Advisories

Published

July 14, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-27293 →

📋 Description

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.

🎯 Affected products1

nuget/RestSharp:<= 106.11.7

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-27293
https://github.com/restsharp/RestSharp/issues/1556
https://restsharp.dev/
https://github.com/restsharp/RestSharp/commit/be39346784b68048b230790d15333574341143bc
https://github.com/advisories/GHSA-9pq7-rcxv-47vq