CVE-2023-35767CWE-400

Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core

High · published November 8, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00947 · 60.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-11-08T15:31Z
EPSS history
Timeline
  • 08 NOV 15:31Z
    Unauthenticated Remote Denial-of-Service via Shutdown Function in Helix Core
    cvelistv5