CVE-2021-23388

Medium

Published: 01 June 2021

Published

01 June 2021

Modified

21 November 2024

KEV Added

—

Patch

—

CVSS Score v3.1 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS Score 0.0037 59.4th percentile

Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-23388 is a medium-severity an unspecified weakness vulnerability in Forms Project Forms. Its CVSS base score is 5.3 (Medium).

Operationally, ranked in the top 40.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The package forms before 1.2.1, from 1.3.0 and before 1.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via email validation.

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

forms project

forms

≤ 1.2.1 · 1.3.0 — 1.3.2

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.