CVEs-PoC/2017/CVE-2017-16114.md

CVE-2017-16114

Description

The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds.

POC

Reference

• https://github.com/chjj/marked/issues/937

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/HotDB-Community/HotDB-Engine
• https://github.com/engn33r/awesome-redos-security
• https://github.com/ossf-cve-benchmark/CVE-2017-16114