CVE-2019-25103: simple-markdown simple-markdown.js redos
A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to version 0.5.2 is able to address this issue. The name of the patch is 89797fef9abb4cab2fb76a335968266a92588816. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220639.
Other sources
A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. Upgrading to version 0.5.2 is able to address this issue. The patch is named 89797fef9abb4cab2fb76a335968266a92588816. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-220639.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25103?
CVE-2019-25103 is classified as a problematic vulnerability affecting simple-markdown version 0.5.1.
How do I fix CVE-2019-25103?
To fix CVE-2019-25103, upgrade the simple-markdown package to version 0.5.2 or later.
What are the potential impacts of CVE-2019-25103?
The vulnerability in CVE-2019-25103 could lead to inefficient regular expression complexity, which may be exploited remotely.
Which versions of simple-markdown are affected by CVE-2019-25103?
CVE-2019-25103 affects simple-markdown version 0.5.1.
Who maintains the simple-markdown package related to CVE-2019-25103?
The simple-markdown package is maintained by Khan Academy.