Lucene search

K
nvd[email protected]NVD:CVE-2023-31289
HistoryDec 25, 2023 - 6:15 a.m.

CVE-2023-31289

2023-12-2506:15:08
CWE-20
web.nvd.nist.gov
pexip infinity remote attack

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.5%

Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort.

Affected configurations

Nvd
Node
pexippexip_infinityRange<31.2
VendorProductVersionCPE
pexippexip_infinity*cpe:2.3:a:pexip:pexip_infinity:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

34.5%

Related for NVD:CVE-2023-31289