PT-2023-3138 · Microsoft · Yet Another Reverse Proxy

CVE-2023-33141

·

Publicado

2023-06-13

·

Atualizado

2024-05-29

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Yet Another Reverse Proxy (YARP) (affected versions not specified)
Description The issue is related to insufficient input validation in Yet Another Reverse Proxy (YARP), which can be exploited by a remote attacker to cause a denial of service.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Resource Exhaustion

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-03236
CVE-2023-33141
GHSA-JRJW-QGR2-WFCG

Produtos afetados

Yet Another Reverse Proxy