What is CVE-2018-25110?

CVE-2018-25110 is a high-severity vulnerability in Marked_project Marked, classified under Inefficient Regular Expression Complexity. CVSS score: 7.5/10. Published 2025-05-23.

How severe is CVE-2018-25110?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Marked_project Marked

CVE-2018-25110

Marked prior to version 0.3.17 is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to catastrophic backtracking in several regular expressions used for parsing HTML tags and markdown links. An attacker can exploit th…

Vulnerability class: ReDoS (Regular Expression Denial of Service)

EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Marked_project Marked

Weakness classification (CWE)

CWE-1333 — Inefficient Regular Expression Complexity

References

596c5446-0ce5-4ba2-aa66-48b3b757a647 (issue-tracking, Third Party Advisory, Issue Tracking)
596c5446-0ce5-4ba2-aa66-48b3b757a647 (issue-tracking, Patch, Issue Tracking)
596c5446-0ce5-4ba2-aa66-48b3b757a647 (Patch, patch)
596c5446-0ce5-4ba2-aa66-48b3b757a647 (Exploit, Third Party Advisory, exploit)

Frequently asked questions

What is CVE-2018-25110?: CVE-2018-25110 is a high-severity vulnerability in Marked_project Marked, classified under Inefficient Regular Expression Complexity. CVSS score: 7.5/10. Published 2025-05-23.
How severe is CVE-2018-25110?: High severity. CVSS v3 base score is 7.5 out of 10.