CVE-2023-23617
OpenMage LTS has DoS vulnerability in MaliciousCode filter
Summary
OpenMage LTS has DoS vulnerability in MaliciousCode filter
Original description
The description as published by the source.
OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
openmage/magento-lts
[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0"},{"fixed":"20.0.19"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web github.com