VDB
BDU%3A2023-07521
BDU%3A2023-07521
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость анализатора и компилятора уценки Marked, связанная с некорректной обработкой регулярного выражения, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat, Inc., IBM Corp., Christopher Jeffrey | Red Hat OpenShift GitOps, Red Hat Ceph Storage, IBM Maximo Asset Management, Marked | |
| Red Hat Inc., IBM Corp., Christopher Jeffrey | Red Hat OpenShift GitOps, Red Hat Ceph Storage, IBM Maximo Asset Management, Marked |
Timeline
- Nov 8, 2023 CVE Published
References
- https://github.com/markedjs/marked/commit/c4a3ccd344b6929afa8a1d50ac54a721e57012c0 advisory
- https://github.com/markedjs/marked/security/advisories/GHSA-rrrm-qjm4-v8hf url
- https://www.ibm.com/support/pages/security-bulletin-there-are-multiple-vulnerabilities-nodejs-used-ibm-maximo-asset-management-cve-2022-21681-cve-2022-21680 advisory
- https://access.redhat.com/security/cve/cve-2022-21680 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2082705 url
- https://github.com/markedjs/marked/releases/tag/v4.0.10 advisory