Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39270
HistoryFeb 15, 2023 - 2:02 a.m.

Regular Expression Denial Of Service (ReDoS)

2023-02-1502:02:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
redos
simple-markdown
insecure regex pattern
autolink object
crash
application
maliciously crafted pattern
vulnerability

EPSS

0.002

Percentile

58.9%

simple-markdown is vulnerable to Regular Expression Denial Of Service (ReDoS). The vulnerability exists due to an insecure Regex pattern used for the match attribute in the autolink object in simple-markdown.js, which allows an attacker to crash the application by providing a maliciously crafted pattern like such as <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/

EPSS

0.002

Percentile

58.9%

Related for VERACODE:39270