Beveiligingsadvies

CVE-2019-16215

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-09-18 11:07:00

Laatst bijgewerkt 2024-08-05 01:10:41

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Markdown parser in Zulip server before 2.0.5 used a regular expression vulnerable to exponential backtracking. A user who is logged into the server could send a crafted message causing the server to spend an effectively arbitrary amount of CPU time and stall the processing of future messages.

← Alle CVE's bekijken Bekijk op cve.org ↗