Vulnerability · Published Jun 22, 2025 · Assigned by VulDB

CVE-2025-6492MarkText index.js getRecommendTitleFromMarkdownString redos

Medium 5.3

In plain English

A medium-severity regular-expression denial of service in MarkText. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.5%top 54.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in MarkText up to 0.17.1 and classified as problematic. Affected by this vulnerability is the function getRecommendTitleFromMarkdownString of the file marktext/src/main/utils/index.js. The manipulation leads to inefficient regular expression complexity. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
n/a	MarkText	0.17.00.17.1

Weakness: CWE-1333, CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

References

VDB-313609 | MarkText index.js getRecommendTitleFromMarkdownString redos vdb-entry, technical-description
VDB-313609 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #598208 | marktext 0.17.1 Inefficient Regular Expression Complexity third-party-advisory
https://github.com/marktext/marktext/pull/3952 issue-tracking
https://github.com/mmmsssttt404/marktext/blob/c59b3ad423dfa082869933baf9f5d5c69bdcc560/test/unit/specs/match-electron-accelerator.spec.js#L155-L164 exploit