Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-3A39F299472820D5A9EB8ED6CF269F17HistoryDec 14, 2023 - 12:00 a.m.
@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity
2023-12-1400:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
17
input validation
denial of service
css parsing
security patch
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
28.6%
Impact
@adobe/css-tools version 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
Patches
The issue has been resolved in 4.3.2.
Workarounds
None
References
N/A
Affected configurations
Node
npmcss-toolsRange<4.3.2
Related
mscve
mscve
prion
prion
Input validation
2023-12-14 13:15:00
redhatcve
redhatcve
CVE-2023-48631
2023-12-14 16:14:04
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-12-01 07:53:53
osv
osv
cvelist
cvelist
cve
cve
CVE-2023-48631
2023-12-14 13:15:54
github
github
nvd
nvd
CVE-2023-48631
2023-12-14 13:15:54
redhat
redhat
ibm
ibm
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
28.6%
Related for GITLAB-3A39F299472820D5A9EB8ED6CF269F17