Description

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

INFO

Published Date :

Dec. 8, 2017, 4:29 a.m.

Last Modified :

Nov. 7, 2023, 2:41 a.m.

Remotely Exploit :

No
Affected Products

The following products are affected by CVE-2017-17461 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Marked_project marked
Public PoC/Exploit Available at Github

CVE-2017-17461 has a 5 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

None

JavaScript

Updated: 1 month ago
0 stars 0 fork 0 watcher
Born at : Feb. 20, 2026, 7:31 a.m. This repo has been linked 18 different CVEs too.

None

JavaScript

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Feb. 6, 2026, 4:31 a.m. This repo has been linked 18 different CVEs too.

None

JavaScript

Updated: 1 month, 2 weeks ago
0 stars 0 fork 0 watcher
Born at : Jan. 29, 2026, 7:46 a.m. This repo has been linked 18 different CVEs too.

None

CMake Shell Perl C++ C Batchfile CSS Makefile M4 Python

Updated: 2 years ago
34 stars 0 fork 0 watcher
Born at : Feb. 1, 2024, 11:43 a.m. This repo has been linked 71 different CVEs too.

None

JavaScript Makefile HTML

Updated: 5 years, 3 months ago
0 stars 0 fork 0 watcher
Born at : Nov. 30, 2020, 2:52 p.m. This repo has been linked 1 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2017-17461 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2017-17461 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    Nov. 07, 2023

    Action Type Old Value New Value
    Changed Description ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
  • CVE Modified by [email protected]

    Feb. 06, 2018

    Action Type Old Value New Value
    Changed Display Vulnerability true false
    Changed Description A Regular expression Denial of Service (ReDoS) vulnerability in the file marked.js of the marked npm package (tested on version 0.3.7) allows a remote attacker to overload and crash a server by passing a maliciously crafted string. ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
    Removed CVSS V2 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
    Removed CVSS V3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Removed Reference https://www.checkmarx.com/advisories/regular-expression-denial-service-redos-vulnerability-marked-npm-package/ [Exploit, Third Party Advisory]
    Removed CWE CWE-20
    Removed CPE Configuration OR *cpe:2.3:a:npmjs:marked:*:*:*:*:*:*:*:* versions up to (including) 0.3.7
  • CVE Rejected by [email protected]

    Feb. 06, 2018

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Dec. 22, 2017

    Action Type Old Value New Value
    Added CVSS V2 (AV:N/AC:L/Au:N/C:N/I:N/A:P)
    Added CVSS V3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    Changed Reference Type https://www.checkmarx.com/advisories/regular-expression-denial-service-redos-vulnerability-marked-npm-package/ No Types Assigned https://www.checkmarx.com/advisories/regular-expression-denial-service-redos-vulnerability-marked-npm-package/ Exploit, Third Party Advisory
    Added CWE CWE-20
    Added CPE Configuration OR *cpe:2.3:a:npmjs:marked:*:*:*:*:*:*:*:* versions up to (including) 0.3.7
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.