CVE-2020-7733

PoC ×3—

CVSS 3.1

7.5 high

EPSS

4%p91

Published

Sep 16, 2020 (Sep 16, 2020)

Modified

Jun 17, 2026

Description

The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex for Redmi Phones and Mi Pad Tablets UA.

Vendors: ua-parser-js project oracle
Products: ua-parser-js, communications cloud native core network function cloud native environment
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (4.5%)

In the news0 stories

No ingested article mentions this CVE yet.