PT-2023-11361 · Unknown · Simple-Markdown

CVE-2019-25103

·

Publicado

2023-02-12

·

Atualizado

2024-05-17

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions simple-markdown version 0.5.1
Description A vulnerability has been found in the simple-markdown software, affecting an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely.
Recommendations For simple-markdown version 0.5.1, upgrade to version 0.5.2 to address this issue.

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2019-25103
GHSA-GPVJ-GP8C-C7P2

Produtos afetados

Simple-Markdown