Vulnerabilities > CVE-2023-48631 - Unspecified vulnerability in Adobe Css-Tools

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

adobe

NVD

Published: 2023-12-14

Updated: 2023-12-18

Summary

@adobe/css-tools versions 4.3.1 and earlier are affected by an Improper Input Validation vulnerability that could result in a denial of service while attempting to parse CSS.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe CSS Tools 1.0.1 Adobe CSS Tools 1.0.2 Adobe CSS Tools 1.0.3 Adobe CSS Tools 1.0.4 Adobe CSS Tools 1.0.5 Adobe CSS Tools 1.0.6 Adobe CSS Tools 1.0.7 Adobe CSS Tools 1.0.8 Adobe CSS Tools 1.1.0 Adobe CSS Tools 1.2.0 Adobe CSS Tools 1.3.0 Adobe CSS Tools 1.3.1 Adobe CSS Tools 1.4.0 Adobe CSS Tools 1.4.1 Adobe CSS Tools 1.6.0 Adobe CSS Tools 1.6.1 Adobe CSS Tools 2.0.0 Adobe CSS Tools 2.1.0 Adobe CSS Tools 2.2.0 Adobe CSS Tools 2.2.1 Adobe CSS Tools 2.2.2 Adobe CSS Tools 2.2.3 Adobe CSS Tools 2.2.4 Adobe CSS Tools 3.0.0 Adobe CSS Tools 4.0.0 Adobe CSS Tools 4.0.1 Adobe CSS Tools 4.0.2 Adobe CSS Tools 4.1.0 Adobe CSS Tools 4.2.0 Adobe CSS Tools 4.3.0 Adobe CSS Tools 4.3.1	38

References

https://github.com/adobe/css-tools/security/advisories/GHSA-prr3-c3m5-p7q2