CVE-2023-23617
OpenMage LTS has DoS vulnerability in MaliciousCode filter
Résumé
OpenMage LTS has DoS vulnerability in MaliciousCode filter
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
openmage/magento-lts
[{"type":"ECOSYSTEM","events":[{"introduced":"20.0.0"},{"fixed":"20.0.19"}]}]
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web github.com