The vulnerability exists due to insufficient input validation when processing regular expressions within the custom built markdown page. A remote user can pass specially crafted data to the application and perform regular expression denial of service (ReDos) attack.