PT-2024-15266 · Secure Systems Engineering · Secure Systems Engineering Connaisseur

🗓️ 02 Sep 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 2 Views

Vulnerability in Secure Systems Engineering Connaisseur up to 3.3.0 affects the Delegation Name Handler schema file; causes high regex complexity with difficult exploitation. Upgrade to 3.3.1.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2023-7279	2 Sep 202421:24	–	circl
CNNVD	Connaisseur 安全漏洞	2 Sep 202400:00	–	cnnvd
CVE	CVE-2023-7279	2 Sep 202414:00	–	cve
Cvelist	CVE-2023-7279 Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos	2 Sep 202414:00	–	cvelist
EUVD	EUVD-2023-59663	3 Oct 202520:07	–	euvd
NVD	CVE-2023-7279	2 Sep 202418:15	–	nvd
Vulnrichment	CVE-2023-7279 Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos	2 Sep 202414:00	–	vulnrichment

Source	Link
github	www.github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02
github	www.github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1
github	www.github.com/sse-secure-systems/connaisseur/pull/1407
osv	www.osv.dev/vulnerability/CVE-2023-7279
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-7279
twitter	www.twitter.com/transilienceai/status/1831794214226817059
twitter	www.twitter.com/transilienceai/status/1831794200066564387
twitter	www.twitter.com/transilienceai/status/1831794171327476055
t	www.t.me/cvenotify/92998
twitter	www.twitter.com/transilienceai/status/1831794256652198392

01 Nov 2024 00:00Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.12.6 - 5.9

CVSS 21.4

CVSS 42.1

CVSS 32.6

EPSS0.00089

SSVC