CVE-2025-6492 in MarkText

Riassunto

di MITRE • 23/06/2025

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsabile: VulDB
• Divulgazione: 23/06/2025
• Moderazione: accettato
• Voce: VDB-313609
• CPE: pronto
• CWE: CWE-1333 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.3 (CNA)
• EPSS: 0.00448
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-6492
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-6492
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-6492/