VDB
BDU%3A2023-07520
BDU%3A2023-07520
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость анализатора и компилятора уценки Marked, связанная с некорректной обработкой регулярного выражения, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., IBM Corp., Christopher Jeffrey | Red Hat OpenShift GitOps, Red Hat Ceph Storage, IBM Maximo Asset Management, Marked |
Timeline
- Nov 8, 2023 CVE Published
References
- https://github.com/markedjs/marked/commit/8f806573a3f6c6b7a39b8cdb66ab5ebb8d55a5f5 url
- https://github.com/markedjs/marked/security/advisories/GHSA-5v2h-r2cx-5xgj url
- https://www.ibm.com/support/pages/security-bulletin-there-are-multiple-vulnerabilities-nodejs-used-ibm-maximo-asset-management-cve-2022-21681-cve-2022-21680 url
- https://access.redhat.com/security/cve/cve-2022-21681 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2082706 url
- https://github.com/markedjs/marked/releases/tag/v4.0.10 advisory