CVE-2023-45319CWE-400

Unauthenticated Remote Denial-of-Service (Commit) in Helix Core

High · published November 8, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was identified. Reported by Jason Geffner.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00946 · 60.8th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2023-11-08T15:43Z
EPSS history
Timeline
  • 08 NOV 15:43Z
    Unauthenticated Remote Denial-of-Service (Commit) in Helix Core
    cvelistv5