Lucene search
TenableCVE-2024-1899HistoryFeb 26, 2024 - 7:15 p.m.
CVE-2024-1899
2024-02-2619:15:07
CWE-674
tenable
web.nvd.nist.gov
73
anchors
subparser
showdownjs
remote attack
denial of service
cve-2024-1899
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could allow a remote attacker to cause denial of service conditions.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Showdown",
"repo": "https://github.com/showdownjs/showdown",
"vendor": "Showdownjs",
"versions": [
{
"lessThanOrEqual": "2.1.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
ubuntucve
ubuntucve
CVE-2024-1899
2024-02-26 00:00:00
nvd
nvd
CVE-2024-1899
2024-02-26 19:15:07
prion
prion
Race condition
2024-02-26 19:15:00
cvelist
cvelist
CVE-2024-1899 Showdownjs Denial of Service
2024-02-26 18:45:23
vulnrichment
vulnrichment
CVE-2024-1899 Showdownjs Denial of Service
2024-02-26 18:45:23
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
AI Score
5.2
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2024-1899