Home / Vulnerability Database / Scala : DOS attack via regular expressions possible
Scala

Scala : DOS attack via regular expressions possible

Classification

Overview

The regexp used is unreliable, which can be computationally intensive for some inputs. Regular expression denial of service (ReDOS) attack is possible.

Regular expressions are widely used in applications to validate the user-supplied data. Expressions containing structures like (( )+)+ cause execution of a significant amount of iterations. By inputting a certain type of string an attacker can disrupt the application operation. All implementations of regular expressions have such vulnerabilities.

MEDIUM

DerScanner Severity Score

Do you want to fix Scala : DOS attack via regular expressions possible in your application?

See also

Scala

Scala : Unreleased resource stream

Scala

Scala : Multiple loggers in same class

Scala

Scala : Insufficient encryption key length