Cloudanix VulnDB

CVE-2025-66453

High · 7.5

CVSS

7.5

EPSS

0.3%

Published

Dec 3, 2025

CISA due date

—

The record

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed() function, it might lead to high CPU consumption and a potential Denial of Service. Small numbers go through this call stack: NativeNumber.numTo > DToA.JS_dtostr > DToA.JS_dtoa > DToA.pow5mult where pow5mult attempts to raise 5 to a ridiculous power. This vulnerability is fixed in 1.8.1, 1.7.15.1, and 1.7.14.1.

Affected packages

Ecosystem Package Introduced Fixed
Maven org.mozilla:rhino 0 1.7.14.1
Maven org.mozilla:rhino 1.7.15 1.7.15.1
Maven org.mozilla:rhino 1.8.0 1.8.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6 rhino 0 1.7.15.1-150200.12.7.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7 rhino 0 1.7.15.1-150200.12.7.1
maven org.mozilla/rhino 1.7.15 1.7.15.1
maven org.mozilla/rhino 1.8.0 No fix
maven org.mozilla/rhino 1.8.0 1.8.1
openSUSE:Leap 15.6 rhino 0 1.7.15.1-150200.12.7.1
openSUSE:Leap 16.0 rhino 0 1.7.15.1-160000.1.1
openSUSE:Tumbleweed rhino 0 1.7.15.1-1.1

Related vulnerabilities