Unknown · Jquery-Validation · CVE-2022-31147
**Name of the Vulnerable Software and Affected Versions**
jquery-validation versions prior to 1.19.5
**Description**
The issue is related to the incorrect handling of regular expressions in the url2 method of the jQuery Validation Plugin, which can lead to a denial of service when an attacker supplies arbitrary input. This is due to an incomplete fix for a previous issue. The estimated number of potentially affected devices is not specified. There is no information about real-world incidents where this issue was exploited.
Technical details about exploitation include the `url2` method, which is vulnerable to regular expression denial of service (ReDoS) attacks when an attacker can supply arbitrary input.
**Recommendations**
For versions prior to 1.19.5, upgrade to version 1.19.5 to receive a patch.
As a temporary workaround, consider restricting access to the `url2` method to minimize the risk of exploitation.