CVE:CVE-2020-7760
CNNVD:CNNVD-202010-1679
CodeMirror是CodeMirror（Codemirror）团队的一个使用JavaScript为浏览器实现的多功能文本编辑器。该软件专门用于编辑代码，并具有100多种语言模式和各种插件，可实现更高级的编辑功能，每种语言都带有功能齐全的代码和语法高亮显示，以帮助阅读和编辑复杂代码。
codemirror 5.58.2 之前版本和org.apache.marmotta.webjars:codemirror 5.58.2 之前版本存在资源管理错误漏洞。该漏洞源于blob/cdb228ac736369c685865b122b736cd0d397836c、mode/javascript/javascript.jsL 129行中的 (s|/*.*?*/)* 正则表达式逻辑错误。
solution:Upgrade codemirror codemirror to a higher version than 5.58.2,and avoid the version (,5.58.2); Upgrade oracle application_express to a higher version than 20.2,and avoid the version (,20.2); Upgrade oracle enterprise_manager_express_user_interface to a higher version than 19c,and avoid the version 19c; Upgrade oracle essbase to a higher version than 21.2,and avoid the version 21.2; Upgrade oracle hyperion_data_relationship_management to a higher version than 11.2.9.0,and avoid the version (,11.2.9.0); Upgrade oracle spatial_studio to a higher version than 19.1.0,and avoid the version (,19.1.0)