Unscored CVE-2021-38244 EUVD-2021-24702GHSA-6624-25m9-qrx8

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignif…

Published Dec 16, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json.

References

https://github.com/cBioPortal/cbioportal/issues/8680
https://github.com/cBioPortal/cbioportal/pull/8751