Checkmate ReDoS via User-Controlled Regex in Monitor Advanced Matching (CVE: TBD) with POC

Vulnerability Overview Vulnerability Name: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching Vulnerability Description: An authenticated administrator or super administrator can create a monitor with a malicious regular expression in the field (when is "regex"), causing catastrophic backtracking during the evaluation of the HTTP response body. Since the regular expression evaluation runs on Node.js's main event loop without timeouts or worker thread isolation, a single malicious monitor can freeze the entire Checkmate server, rendering all API endpoints, monitoring checks, and WebSocket connections unresponsive to all users. Affected Versions Affected Versions: >= 5.5.1, <= 3.8.1 Fixed Versions: Not yet fixed CVSS v3 Base Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: High - User Interaction: None - Scope: Unchanged - Confidentiality: None - Integrity: None - Availability: High Remediation Current Status: Not yet fixed Recommended Measures: No mitigation measures available; it is recommended to update to the patched version as soon as possible. POC Code Impact Complete Server Freeze: A single regular expression evaluation blocks the Node.js main event loop indefinitely. All Monitoring Checks Halted: Every monitor is affected each time it receives a check. All Users Affected: All teams sharing the same server instance are impacted. Persistent Attack: The malicious regular expression is stored in the database and re-executed during each check cycle. Difficult to Diagnose: The server process appears healthy (ports are open) but never responds. Additional Information CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CWE: CWE-133 Credits: Thai Son Dinh from VinSec Labs (R&D)

Goal Reached Thanks to every supporter — we hit 100%!

Checkmate ReDoS via User-Controlled Regex in Monitor Advanced Matching (CVE: TBD) with POC

More from this source