CWE-1333 - Inefficient Regular Expression Complexity

Description

The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.

Latest vulnerabilities for CWE-1333

Inefficient regular expression complexity in HPE Telco Service Orchestrator 2025-02-04
Low Yes
IBM watsonx.data update for path-to-regexp 2025-01-31
Low Yes
Multiple vulnerabilities in IBM Cloud Transformation Advisor 2025-01-28
Medium Yes
Multiple vulnerabilities in IBM Application Modernization Accelerator 2025-01-28
Medium Yes
IBM App Connect Enterprise update for path-to-regexp 2025-01-27
Low Yes
Multiple vulnerabilities in IBM Cloud Pak System 2025-01-20
Medium Yes
Inefficient regular expression complexity in nodejs-tmpl 2025-01-20
Medium Yes
Regular expression denial of service in Splunk Supporting Add-on for Active Directory 2025-01-15
Low Yes
Multiple vulnerabilities in IBM QRadar Log Source Management App 2025-01-13
High Yes Public exploit
Multiple vulnerabilities in IBM Security QRadar Analyst Workflow 2025-01-09
Medium Yes

References

Description of CWE-1333 on Mitre website