CVE-2023-37279

Faktory web dashboard vulnerability: prior to version 1.8.0, a crafted malicious days URL query parameter is read without validation, used to create a string slice, leading to memory growth and potential DoS. The issue is fixed in 1.8.0. Public advisory (GHSA) provides PoC details; impact is serv...

CVE-2023-37279 Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...