[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2021-3749":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":75,"references":79,"score":107,"epss_score":108,"epss_percentile":109,"is_kev":110,"cisa_kev_date_added":111,"cisa_kev_due_date":111,"cisa_ssvc":112,"attack_mappings":118,"exploits":134},291560,"CVE-2021-3749","EUVD-2021-2040","axios Inefficient Regular Expression Complexity vulnerability\n\naxios before v0.21.2 is vulnerable to Inefficient Regular Expression Complexity.","2021-09-01T18:23:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":17,"attackComplexity":18,"availabilityImpact":15,"privilegesRequired":17,"confidentialityImpact":17},"UNCHANGED","3.1",7.5,"NETWORK","HIGH","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H","NONE","LOW",true,[21,22],"CWE-1333","CWE-400",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74],"cpe:2.3:a:axios:axios:0.21.0:*:*:*:*:node.js:*:*","cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","cpe:2.3:a:axios:axios:0.5.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.17.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.19.0:beta1:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.15.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.4.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.7.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.5.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.19.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.20.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.11.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.1.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.13.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.15.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.15.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.21.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.8.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.14.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.11.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.13.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.5.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.17.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.19.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.15.3:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.12.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.2.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.3.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.9.0:*:*:*:*:node.js:*:*","cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*","cpe:2.3:a:axios:axios:0.4.1:*:*:*:*:node.js:*:*","cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*","cpe:2.3:a:axios:axios:0.10.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.18.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.16.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.4.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.5.4:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.18.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:*:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.2.2:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.6.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.9.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.5.3:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.16.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.2.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.8.0:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.16.0:*:*:*:*:node.js:*:*","cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:*","cpe:2.3:a:axios:axios:0.3.1:*:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:0.19.0:-:*:*:*:node.js:*:*","cpe:2.3:a:axios:axios:*:*:*:*:*:*:*:*",[76,77,78],"Siemens Sinec Ins","Oracle Goldengate","Axios Axios",[80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106],"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-637483.pdf","https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios\u002Fcommit\u002F5b457116e31db0e88fede6c428e969e87f290929","https:\u002F\u002Fhuntr.dev\u002Fbounties\u002F1e8f07fc-c384-4ff9-8498-0690de2e8c31","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a%40%3Cdev.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103%40%3Ccommits.druid.apache.org%3E","https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2021-3749","https:\u002F\u002Fwww.npmjs.com\u002Fpackage\u002Faxios","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfc5c478053ff808671aef170f3d9fc9d05cc1fab8fb64431edc66103@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frfa094029c959da0f7c8cd7dc9c4e59d21b03457bf0cedf6c93e1bb0a@%3Cdev.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc263bfc5b53afcb7e849605478d73f5556eb0c00d1f912084e407289@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fra15d63c54dc6474b29f72ae4324bcb03038758545b3ab800845de7a1@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr74d0b359408fff31f87445261f0ee13bdfcac7d66f6b8e846face321@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr7324ecc35b8027a51cb6ed629490fcd3b2d7cf01c424746ed5744bf1@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr4bf1b32983f50be00f9752214c1b53738b621be1c2b0dbd68c7f2391@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr3ae6d2654f92c5851bdb73b35e96b0e4e3da39f28ac7a1b15ae3aab8@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr216f0fd0a3833856d6a6a1fada488cadba45f447d87010024328ccf2@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr075d464dce95cd13c03ff9384658edcccd5ab2983b82bfc72b62bb10@%3Ccommits.druid.apache.org%3E","https:\u002F\u002Fgithub.com\u002Faxios\u002Faxios",0.73,0.08515,0.95006,false,null,{"timestamp":111,"automatable":113,"tech_impact":114,"exploitation":115,"cisa_decision":116,"cisa_remediation_timeline":117},"no","partial","none",{},"FSU",[119,125],{"name":120,"source":121,"tactics":122,"technique_id":124},"Exploit Public-Facing Application","attack_vector",[123],"initial-access","T1190",{"name":126,"source":127,"cwe_ids":128,"tactics":129,"capec_ids":131,"technique_id":133},"Endpoint Denial of Service","capec",[22],[130],"impact",[132],"CAPEC-227","T1499",[135],{"link":82}]