Lucene search
Veracode Vulnerability DatabaseVERACODE:43076HistorySep 01, 2023 - 4:50 p.m.
Regular Expression Denial Of Service (ReDoS)
2023-09-0116:50:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
regular expression denial of service
redos
css parsing
application slowdown
vulnerability
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
20.4%
@adobe/css-tools is vulnerable to Regular Expression Denial of Service (ReDoS). The vulnerability exists in index.ts due to improper input validations which allows an attacker to cause an application slowdown when parsing CSS.
Related
nessus
nessus
RHEL 6 : css-tools (Unpatched Vulnerability)
2024-06-03 00:00:00
cve
cve
CVE-2023-26364
2023-11-17 14:15:21
cvelist
cvelist
github
github
nvd
nvd
CVE-2023-26364
2023-11-17 14:15:21
gitlab
gitlab
vulnrichment
vulnrichment
prion
prion
Input validation
2023-11-17 14:15:00
redhatcve
redhatcve
CVE-2023-26364
2023-11-17 22:20:05
osv
osv
ibm
ibm
redhat
redhat
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS
0.001
Percentile
20.4%
Related for VERACODE:43076