What is GHSA-3p73-mm7v-4f6m?

GHSA-3p73-mm7v-4f6m is a security advisory published by GitHub Security Advisories with Medium severity. DoS vulnerability in MaliciousCode filter

Which CVE IDs does GHSA-3p73-mm7v-4f6m cover?

GHSA-3p73-mm7v-4f6m covers the following CVE IDs: CVE-2023-23617. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3p73-mm7v-4f6m?

GHSA-3p73-mm7v-4f6m has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

Which products are affected by GHSA-3p73-mm7v-4f6m?

GHSA-3p73-mm7v-4f6m affects 2 products, including: composer/openmage/magento-lts:\u003c 19.4.22; composer/openmage/magento-lts:\u003e= 20.0.0, \u003c 20.0.19.

GHSA-3p73-mm7v-4f6mMediumCVSS 4.9

DoS vulnerability in MaliciousCode filter

Vendor

GitHub Security Advisories

Published

January 27, 2023

Last Modified

January 28, 2023

🔗 CVE IDs covered (1)

CVE-2023-23617 →

📋 Description

Impact

Infinite loop in malicious code filter in certain conditions.

Workarounds

None

🎯 Affected products2

composer/openmage/magento-lts:< 19.4.22
composer/openmage/magento-lts:>= 20.0.0, < 20.0.19

🔗 References (6)

https://github.com/OpenMage/magento-lts/security/advisories/GHSA-3p73-mm7v-4f6m
https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22
https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
https://nvd.nist.gov/vuln/detail/CVE-2023-23617
https://github.com/OpenMage/magento-lts/commit/494027785bdb7db53e60c11ef03c144b61cd3172
https://github.com/advisories/GHSA-3p73-mm7v-4f6m