CVE-2023-34623

Name of the Vulnerable Software and Affected Versions jtidy versions thru r938

Description The issue is related to a stack overflow error in the jtidy library, which is used for cleaning and validating HTML code. Exploitation of this issue can allow a remote attacker to cause a denial of service or other unspecified impacts via a crafted object that uses cyclic dependencies.

Recommendations For jtidy versions thru r938, consider disabling the use of cyclic dependencies in crafted objects until a patch is available. As a temporary workaround, restrict the use of jtidy library to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.