-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer | maven | < 1.24.2 | 1.24.2 |
Miggo AIRoot Cause AnalysisThe key evidence comes from the commit diff showing the vulnerable regex implementation was replaced with an interruptible CharSequence wrapper. The original code used String.matches() which isn't interruptible, while the patched version introduces Pattern.compile() with InterruptibleCharSequence. The advisory specifically mentions the inability to interrupt regex processing as the core vulnerability, which maps directly to this function's pre-patch behavior.
Ongoing coverage of React2Shell