Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-9B3ECA85861F74CFF40C7CF01FCB183DHistoryNov 17, 2023 - 12:00 a.m.
@adobe/css-tools Regular Expression Denial of Service (ReDOS) while Parsing CSS
2023-11-1700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
11
adobe
css tools
redos
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
20.4%
Impact
@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.
Patches
The issue has been resolved in 4.3.1.
Workarounds
None
References
N/A
Affected configurations
Node
npmcss-toolsRange<4.3.1
Related
nessus
nessus
RHEL 6 : css-tools (Unpatched Vulnerability)
2024-06-03 00:00:00
cve
cve
CVE-2023-26364
2023-11-17 14:15:21
cvelist
cvelist
github
github
nvd
nvd
CVE-2023-26364
2023-11-17 14:15:21
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2023-09-01 16:50:15
vulnrichment
vulnrichment
prion
prion
Input validation
2023-11-17 14:15:00
redhatcve
redhatcve
CVE-2023-26364
2023-11-17 22:20:05
osv
osv
ibm
ibm
redhat
redhat
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
20.4%
Related for GITLAB-9B3ECA85861F74CFF40C7CF01FCB183D