CVE-2023-40599

2023-08-2502:18:19

jpcert

www.cve.org

mailform pro cgi

redos vulnerability

denial of service

unauthenticated attacker

0.001 Low

EPSS

Percentile

35.1%

JSON

Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js, search/search.js, suggest/suggest.js, and coupon/coupon.js.

CNA Affected

[
  {
    "vendor": "SYNCK GRAPHICA",
    "product": "Mailform Pro CGI",
    "versions": [
      {
        "version": "4.3.1.3 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN86484824/

www.synck.com/blogs/news/newsroom/detail_1691668841.html

0.001 Low

EPSS

Percentile

35.1%

JSON

Related for CVELIST:CVE-2023-40599