CVEs-PoC/2017/CVE-2017-16114.md

CVE-2017-16114

Description

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

POC

Reference

• https://github.com/chjj/marked/issues/937

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Blackfly0537/test
• https://github.com/DevSecCube/damn-vulnerable-sca
• https://github.com/HotDB-Community/HotDB-Engine
• https://github.com/SCA-Testing-Org/Damn-Vulnerable-Sca-E2E
• https://github.com/aparnalaxmi07/sca-goat
• https://github.com/engn33r/awesome-redos-security
• https://github.com/harekrishnarai/Damn-vulnerable-sca
• https://github.com/harshit-kochar/Damn-vulnerable-sca
• https://github.com/ossf-cve-benchmark/CVE-2017-16114
• https://github.com/rdosec/Damn-vulnerable-sca