NetSight
high7.5

CVE-2021-38244

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json.

Impact

A regular expression denial of service (ReDoS) vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json.

Affected products

VendorProductAffected versions
Cbioportal ProjectCbioportal
through 3.6.21

Weakness classification

References