CVE-2021-27293

Published: Jul 12, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.

Affected (9)

Products: Restsharp: Restsharp

Restsharp

1 product

Restsharp

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Restsharp Restsharp	Up to 106.11.7
Restsharp Restsharp	Version 106.11.8 alpha0.10
Restsharp Restsharp	Version 106.11.8 alpha0.11
Restsharp Restsharp	Version 106.11.8 alpha0.12
Restsharp Restsharp	Version 106.11.8 alpha0.2
Restsharp Restsharp	Version 106.11.8 alpha0.3
Restsharp Restsharp	Version 106.11.8 alpha0.4
Restsharp Restsharp	Version 106.11.8 alpha0.6
Restsharp Restsharp	Version 106.11.8 alpha0.7