← Back

Switcherapi

switcherapi

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Switcher Client
switcher_client
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-23925
1Switcherapi
1Switcher Client
Nov 21, 2024
Feb 3, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may res...Show more
Switcher Client is a JavaScript SDK to work with Switcher API which is cloud-based Feature Flag. Unsanitized input flows into Strategy match operation (EXIST), where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS). This issue has been patched in version 3.1.4. As a workaround, avoid using Strategy settings that use REGEX in conjunction with EXIST and NOT_EXIST operations. Show less