CVE-2018-25049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in email-existence. It has been rated as problematic. Affected by this issue is some unknown functionality of the file index.js. The manipulation leads to inefficient regular expression complexity. The name of the patch is 0029ba71b6ad0d8ec0baa2ecc6256d038bdd9b56. It is recommended to apply a patch to fix this issue. VDB-216854 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

No affected versions have been published.

Timeline

Published
Dec 27, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-25056.1SAP Commerce does not sufficiently validate user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability in storefronts thaCVE-2018-250506.1A vulnerability, which was classified as problematic, has been found in Harvest Chosen up to 1.8.6. Affected by this issue is the function ACVE-2018-250516.1A vulnerability, which was classified as problematic, was found in JmPotato Pomash. This affects an unknown part of the file Pomash/theme/clCVE-2018-250526.1A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function CVE-2018-250536.1A vulnerability was found in moappi Json2html up to 1.1.x and classified as problematic. This issue affects some unknown processing of the fCVE-2018-250545.4A vulnerability was found in shred cilla. It has been classified as problematic. Affected is an unknown function of the file cilla-xample/srCVE-2018-250556.1A vulnerability was found in FarCry Solr Pro Plugin up to 1.5.x. It has been declared as problematic. Affected by this vulnerability is an uCVE-2018-250566.1A vulnerability, which was classified as problematic, was found in yolapi. Affected is the function render_description of the file yolapi/pyCVE-2018-250579.8A vulnerability was found in simple_php_link_shortener. It has been classified as critical. Affected is an unknown function of the file indeCVE-2018-250586.1A vulnerability classified as problematic has been found in Twitter-Post-Fetcher up to 17.x. This affects an unknown part of the file js/twiCVE-2018-250595.3A vulnerability was found in pastebinit up to 0.2.2 and classified as problematic. Affected by this issue is the function pasteHandler of thCVE-2018-250607.5A vulnerability was found in Macaron csrf and classified as problematic. Affected by this issue is some unknown functionality of the file cs
CVE-2018-25049: High severity, CVSS 7.5 | Vulnix