{"containers":{"cna":{"affected":[{"product":"Rocket.Chat","vendor":"RocketChat","versions":[{"status":"affected","version":"< 3.11.3"}]}],"descriptions":[{"lang":"en","value":"Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2021-08-30T20:55:13.000Z","orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M"},"references":[{"tags":["x_refsource_MISC"],"url":"https://docs.rocket.chat/guides/security/security-updates"},{"tags":["x_refsource_CONFIRM"],"url":"https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/"},{"tags":["x_refsource_MISC"],"url":"https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3"},{"tags":["x_refsource_MISC"],"url":"https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c"}],"source":{"defect":["GHSL-2020-310"],"discovery":"INTERNAL"},"title":"ReDOS in Rocket.Chat","x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"security-advisories@github.com","ID":"CVE-2021-32832","STATE":"PUBLIC","TITLE":"ReDOS in Rocket.Chat"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Rocket.Chat","version":{"version_data":[{"version_value":"< 3.11.3"}]}}]},"vendor_name":"RocketChat"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Rocket.Chat is an open-source fully customizable communications platform developed in JavaScript. In Rocket.Chat before versions 3.11.3, 3.12.2, and 3.13 an issue with certain regular expressions could lead potentially to Denial of Service. This was fixed in versions 3.11.3, 3.12.2, and 3.13."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-400 Uncontrolled Resource Consumption"}]}]},"references":{"reference_data":[{"name":"https://docs.rocket.chat/guides/security/security-updates","refsource":"MISC","url":"https://docs.rocket.chat/guides/security/security-updates"},{"name":"https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/","refsource":"CONFIRM","url":"https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/"},{"name":"https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3","refsource":"MISC","url":"https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3"},{"name":"https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c","refsource":"MISC","url":"https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c"}]},"source":{"defect":["GHSL-2020-310"],"discovery":"INTERNAL"}}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-03T23:33:55.938Z"},"title":"CVE Program Container","references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"https://docs.rocket.chat/guides/security/security-updates"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://securitylab.github.com/advisories/GHSL-2020-310-redos-Rocket.Chat/"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/RocketChat/Rocket.Chat/releases/tag/3.11.3"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/RocketChat/Rocket.Chat/commit/4a0dce973e37ec3f56ca2231d6030511dbdd094c"}]}]},"cveMetadata":{"assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","assignerShortName":"GitHub_M","cveId":"CVE-2021-32832","datePublished":"2021-08-30T20:55:13.000Z","dateReserved":"2021-05-12T00:00:00.000Z","dateUpdated":"2024-08-03T23:33:55.938Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"}