CVE-2020-23478: Regular Expression Denial of Service in… – CVSS 7.5 · Watchpost

← All vulnerabilities

Regular Expression Denial of Service in Leo Editor

높음 7.5CVE-2020-23478 · GHSA-x38q-xg2h-rxgx · PYSEC-2021-338 · Published 22/09/2021 · updated 17/06/2026

요약

CVE-2020-23478은(는) leo, leo (leoeditor)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.2%, 전체 취약점의 69.2%보다 높음.
조치: 6.3 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
leo PyPI	`< 6.3`	`6.3`
leo leoeditor	`= 6.2.1`	No fix yet

Description

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/dart.py.

NVD description

Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/dart.py.

References

nvd.nist.gov/vuln/detail/CVE-2020-23478 · ADVISORY
leo-editor/leo-editor · WEB
leo-editor/leo-editor commit 0298336 · WEB
GitHub Advisory GHSA-x38q-xg2h-rxgx · ADVISORY
leo-editor/leo-editor · WEB
pypa/advisory-database · WEB
cwe.mitre.org/data/definitions/1333.html · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free