CVE-2023-26364

Summary

@adobe/css-tools version 4.3.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a minor denial of service while attempting to parse CSS. Exploitation of this issue does not require user interaction or privileges.

Affected Software

Weaknesses

• CWE-20: Improper Input Validation (CWE-20)

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/adobe/css-tools/security/advisories/GHSA-hpx4-r86g-5jrg

• ←Previous
• Next→