إرسال #598875: codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexityالمعلومات

عنوانcodemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity
الوصفA ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS).
المصدر⚠️ https://github.com/codemirror/codemirror5/issues/7128
المستخدم
 DayShift (UID 80963)
ارسال18/06/2025 08:39 AM (1 سنة منذ)
الاعتدال22/06/2025 08:17 AM (4 days later)
الحالةتمت الموافقة
إدخال VulDB313610 [CodeMirror حتى 5.65.20 Markdown Mode markdown.js الحرمان من الخدمة]
النقاط19

Want to know what is going to be exploited?

We predict KEV entries!