Description
RestSharp < 106.11.8-alpha.0.13 uses a regular expression which is vulnerable to Regular Expression Denial of Service (ReDoS) when converting strings into DateTimes. If a server responds with a malicious string, the client using RestSharp will be stuck processing it for an exceedingly long time. Thus the remote server can trigger Denial of Service.
References (2)
Core 2
Core References
Product x_refsource_misc
https://restsharp.dev/
Exploit, Patch, Third Party Advisory x_refsource_misc
https://github.com/restsharp/RestSharp/issues/1556
Scores
CVSS v3
7.5
EPSS
0.0151
EPSS Percentile
71.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-697
Status
published
Products (3)
nuget/RestSharp
0 - 106.11.8-alpha.0.13NuGet
restsharp/restsharp
106.11.8 alpha0.10 (8 CPE variants)
restsharp/restsharp
< 106.11.7
Published
Jul 12, 2021
Tracked Since
Feb 18, 2026