CVE-2022-31147 PoC — jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306

Source

https://github.com/amhar-hckr/Webapp_Pentast

Associated Vulnerability

Title: jquery-validation ReDoS in url2 due to incomplete fix of CVE-2021-43306 (CVE-2022-31147)
Description:The jQuery Validation Plugin (jquery-validation) provides drop-in validation for forms. Versions of jquery-validation prior to 1.19.5 are vulnerable to regular expression denial of service (ReDoS) when an attacker is able to supply arbitrary input to the url2 method. This is due to an incomplete fix for CVE-2021-43306. Users should upgrade to version 1.19.5 to receive a patch.

Description

CVE-2022-31147 is a path traversal flaw in matthiasmullie/minify. This guide helps security teams test for arbitrary file read on Linux and Windows using Python and curl. It covers automated payload generation, manual validation, and safe practices for vulnerability assessment.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →