CVE-2023-26303 in markdown-it-py

الملخص

بحسب MITRE • 23/02/2023

Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Canonical Ltd.
• حجز: 21/02/2023
• إفشاء: 23/02/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-221667
• CPE: جاهز
• CWE: CWE-404 (مؤكد)
• CVSS: 5.5 (NVD)
• EPSS: 0.00227
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-26303
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-26303
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-26303/