CVE-2021-27293

HIGH

RestSharp < 106.11.8-alpha.0.13 - DoS

Title source: llm

Description

RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.

References (2)

[Product] https://restsharp.dev/

[Exploit, Patch, Third Party Advisory] https://github.com/restsharp/RestSharp/issues/1556

Scores

CVSS v3 7.5

EPSS 0.0044

EPSS Percentile 63.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-697

Status published

Products (3)

nuget/RestSharp 0 - 106.11.8-alpha.0.13NuGet

restsharp/restsharp 106.11.8 alpha0.10 (8 CPE variants)

restsharp/restsharp < 106.11.7

Published Jul 12, 2021

Tracked Since Feb 18, 2026