Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2022-21681
HistoryMay 06, 2022 - 8:29 p.m.

CVE-2022-21681

2022-05-0620:29:55
redhat.com
access.redhat.com
15
vulnerability
markedjs
redos
regular expression denial of service
system availability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

60.8%

JSON

A vulnerability was found in the markedjs package. Affected versions of this package are vulnerable to Regular expression Denial of Service (ReDoS) attacks, affecting system availability.

Related

ibm 10
nvd 1
cvelist 1
cve 1
cnvd 1
debiancve 1
github 1
ubuntucve 1
veracode 1
osv 2
prion 1
nessus 4
openvas 1
fedora 1
redhat 1
ibm
ibm
Security Bulletin: A security vulnerability in Node.js marked module affects IBM Cloud Automation Manager
2022-03-15 17:31:20
Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring instances may be vulnerable to denial of service due to CVE-2022-21681
2022-03-31 14:31:22
Security Bulletin: A security vulnerability in Nodejs marked affects IBM Cloud Pak for Multicloud Management Managed Services
2022-09-19 14:38:15
nvd
nvd
CVE-2022-21681
2022-01-14 17:15:13
cvelist
cvelist
CVE-2022-21681 Exponential catastrophic backtracking (ReDoS) in marked
2022-01-14 00:00:00
cve
cve
CVE-2022-21681
2022-01-14 17:15:13
cnvd
cnvd
marked denial of service vulnerability
2022-01-18 00:00:00
debiancve
debiancve
CVE-2022-21681
2022-01-14 17:15:13
github
github
Inefficient Regular Expression Complexity in marked
2022-01-14 21:04:46
ubuntucve
ubuntucve
CVE-2022-21681
2022-01-14 00:00:00
veracode
veracode
Regular Expression Denial Of Service (ReDoS)
2022-01-17 14:04:05
osv
osv
Inefficient Regular Expression Complexity in marked
2022-01-14 21:04:46
CVE-2022-21681
2022-01-14 17:15:13
prion
prion
Code injection
2022-01-14 17:15:00
nessus
nessus
Fedora 36 : gitqlient (2022-784d729f30)
2022-12-23 00:00:00
RHEL 9 : ceph (Unpatched Vulnerability)
2024-07-11 00:00:00
RHEL 8 : ceph (Unpatched Vulnerability)
2024-07-11 00:00:00
openvas
openvas
Fedora: Security Advisory for gitqlient (FEDORA-2022-784d729f30)
2022-10-10 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: gitqlient-1.5.0-2.fc36
2022-10-08 17:33:50
redhat
redhat
(RHSA-2023:3642) Important: Red Hat Ceph Storage 6.1 Container security and bug fix update
2023-06-15 15:57:53

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

60.8%

JSON
Related for RH:CVE-2022-21681
ibm10nvd1cvelist1cve1cnvd1debiancve1github1ubuntucve1veracode1osv2prion1nessus4openvas1fedora1redhat1