Описание
Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.
Ссылки
- ExploitProduct
- Patch
- ExploitThird Party Advisory
- ExploitProduct
- Patch
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2021-11-02 (исключая)
cpe:2.3:a:octobox_project:octobox:*:*:*:*:*:*:*:*
EPSS
Процентиль: 28%
0.00101
Низкий
7.5 High
CVSS3
Дефекты
CWE-770
CWE-1333
Связанные уязвимости
CVSS3: 7.5
github
почти 3 года назад
Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.
EPSS
Процентиль: 28%
0.00101
Низкий
7.5 High
CVSS3
Дефекты
CWE-770
CWE-1333