Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-1899
HistoryFeb 26, 2024 - 12:00 a.m.

CVE-2024-1899

2024-02-2600:00:00
ubuntu.com
ubuntu.com
5
anchors subparser
remote attacker
denial of service
showdownjs

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.2

Confidence

High

EPSS

0

Percentile

9.0%

An issue in the anchors subparser of Showdownjs versions <= 2.1.0 could
allow a remote attacker to cause denial of service conditions.

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

AI Score

7.2

Confidence

High

EPSS

0

Percentile

9.0%

Related for UB:CVE-2024-1899