openmage/magento-lts · Security
DoS vulnerability in MaliciousCode filter
- GHSA ID
- GHSA-3p73-mm7v-4f6m
- CVE ID
- CVE-2023-23617
- Severity
- medium
- Published
- Updated
- CVSS
- 4.9 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 4.9 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Description
Impact
Infinite loop in malicious code filter in certain conditions.
Workarounds
None
CWEs
- CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
References
- https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m ↗
- https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22 ↗
- https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19 ↗
- https://nvd.nist.gov/vuln/detail/CVE-2023-23617 ↗
- https://github.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172 ↗
- https://github.com/advisories/GHSA-3p73-mm7v-4f6m ↗