CVE-2020-7760

5.3

MEDIUMCVSS v3

Published

October 30, 2020

CVSS v2

5 MEDIUM

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*

codemirror

NPMBasic configuration for the CodeMirror code editor

< 5.58.2NVD

@types/codemirror

NPMTypeScript definitions for codemirror

< 5.58.2NVD

codemirror/codemirror5

GitHub

More on this CVE

NVD↗GitHub Advisory↗

In-browser code editor (version 5, legacy)

NVD

CodeMirror

NuGet GalleryCodeMirror is a JavaScript library that can be used to create a relatively pleasant editor interface for code-like content ― computer programs, HTML markup, and similar. If a mode has been written for the language you are editing, the code will be coloured, and the editor will optionally help you with indentation.

< 5.58.2NVD

Security Advisories

CVE-2020-7760

Description

More on this CVE