1. Home
  2. CVE Database
  3. CVE-2023-39663
HIGH · 7.5

CVE-2023-39663

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes ...

Vulnerability Description

Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MathjaxMathjax<= 2.7.9

Related Weaknesses (CWE)

CWE-1333

References

FAQ

What is CVE-2023-39663?

CVE-2023-39663 is a vulnerability with a CVSS score of 7.5 (HIGH). Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes ...

How severe is CVE-2023-39663?

CVE-2023-39663 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-39663?

Check the references section above for vendor advisories and patch information. Affected products include: Mathjax Mathjax.