PT-2022-13944
CVE-2022-1543
·
Published
2022-04-29
·
Updated
2022-05-11
Description by
CVSS 3.1
9.3
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
Name of the Vulnerable Software and Affected Versions
erudika/scoold versions prior to 1.49.4
Description
The issue is related to improper handling of the
Length parameter. When the text size is large enough, it can cause a momentary outage in a production environment, potentially leading to memory corruption on the server.Recommendations
For versions prior to 1.49.4, update to version 1.49.4 or later to resolve the issue. As a temporary workaround, consider restricting the text size to prevent large inputs from causing outages.
Found an issue in the description? Have something to add? Feel free to write us 👾