CVE-2017-17461
highrejectedpriority · track · 0USRejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
cvss
Technical severity, 0–10. One row per scoring source.
weaknesses
The CWE weakness classes this flaw belongs to.
No weakness (CWE) mapping recorded.
affected products (1)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- GHSA-crmx-v835-hcp4Moderate severity vulnerability that affects marked2018-01-04ghsa · osvUS
# Withdrawn This advisory has been withdrawn, per NVD: ["This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue."](https://nvd.nist.gov/vuln/detail/CVE-2017-17461) # Original Description A Regular expression Denial of Service (ReDoS) vulnerability in the file marked.js of the marked npm package (tested on version 0.3.7) allows a remote attacker to overload and crash a server by passing a maliciously crafted string.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (1) cnnvd
External citations — patches, advisories, analysis.
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan