CVE-2009-3277: Xenu By Datavault

Medium severity, CVSS 5.0. EPSS: 1% chance of exploitation in the next 30 days.

DataVault.Tesla/Impl/TypeSystem/AssociationHelper.cs in datavault allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of an [ (open bracket) followed by many commas, related to a certain regular expression, aka a "ReDoS" vulnerability.

Affected products

Published 2009-09-21. Last modified 2026-06-16.