Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q567-jfmr-4rr7

Опубликовано: 20 фев. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

EPSS

Процентиль: 28%
0.00101
Низкий

7.5 High

CVSS3

Дефекты

CWE-1333

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

EPSS

Процентиль: 28%
0.00101
Низкий

7.5 High

CVSS3

Дефекты

CWE-1333