CVEs-PoC/2021/CVE-2021-23424.md

CVE-2021-23424

Description

This affects all versions of package ansi-html. If an attacker provides a malicious string, it will get stuck processing the input for an extremely long time.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567198
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1567198
• https://snyk.io/vuln/SNYK-JS-ANSIHTML-1296849
• https://snyk.io/vuln/SNYK-JS-ANSIHTML-1296849

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/MaySoMusician/geidai-ikoi
• https://github.com/jra89/thethirdparty