cve/2021/CVE-2021-23353.md

CVE-2021-23353

Description

This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function.

POC

Reference

• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1083287
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-1083288
• https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1083286
• https://snyk.io/vuln/SNYK-JS-JSPDF-1073626

Github

• https://github.com/yetingli/PoCs