DoS vulnerability in MaliciousCode filter

Moderate

mark-netalico published GHSA-3p73-mm7v-4f6m

Jan 26, 2023

Package

No package listed

Affected versions

<= 19.4.21, <= 20.0.18

Patched versions

None

Description

Impact

Infinite loop in malicious code filter in certain conditions.

Patches

Has the problem been patched? What versions should users upgrade to?

Workarounds

Is there a way for users to fix or remediate the vulnerability without upgrading?
No

References

Are there any links users can visit to find out more?

Severity

Moderate

4.9

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H