Gửi #598875: codemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexitythông tin

tiêu đềcodemirror codemirror5 <=5.17.0 Inefficient Regular Expression Complexity
Mô tảA ReDoS vulnerability has been identified in CodeMirror’s Markdown mode. Specially crafted input strings can trigger catastrophic backtracking in several regular expressions, causing the affected application to freeze or significantly degrade its performance. This vulnerability could be exploited in any environment (browser‐ or server‑side) that utilizes CodeMirror’s Markdown mode, leading to denial‑of‑service (DoS).
Nguồn⚠️ https://github.com/codemirror/codemirror5/issues/7128
Người dùng
 DayShift (UID 80963)
Đệ trình18/06/2025 08:39 (cách đây 10 các tháng)
Kiểm duyệt22/06/2025 08:17 (4 days later)
Trạng tháiđược chấp nhận
Mục VulDB313610 [CodeMirror đến 5.65.20 Markdown Mode markdown.js Từ chối dịch vụ]
điểm19

Interested in the pricing of exploits?

See the underground prices here!