Vulnerability advisory
GHSA-3p73-mm7v-4f6m
DoS vulnerability in MaliciousCode filter
Also known as CVE-2023-23617
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 19.4.22 | 19.4.22Advisories → |
20.0.0 to before 20.0.19 | 20.0.19Advisories → |
Description
Impact
Infinite loop in malicious code filter in certain conditions.
Workarounds
None
References
- Webgithub.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m ↗
- Advisorynvd.nist.gov/vuln/detail/CVE-2023-23617 ↗
- Webgithub.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172 ↗
- Packagegithub.com/OpenMage/magento-lts ↗
- Webgithub.com/OpenMage/magento-lts/releases/tag/v19.4.22 ↗
- Webgithub.com/OpenMage/magento-lts/releases/tag/v20.0.19 ↗