CVE-2023-50728
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-50728 is a high-severity vulnerability that affects the octokit/webhooks toolset for Node.js versions 9.26.0 and prior. The vulnerability arises from an error handling issue in the @octokit/webhooks library, where an undefined error can cause an uncaught exception, leading to the termination of the nodejs process. The bug has been addressed and fixed in versions 9.26.3, 10.9.2, 11.1.2, and 12.0.4 of octokit/webhooks.js, app.js 14.02, octokit.js 3.1.2, and Protobot 12.3.3. This vulnerability poses a potential danger to organizations using affected versions as it could result in denial-of-service incidents if exploited by an attacker over the network without requiring any privileges or user interaction. Note: The provided summary is based on the available information and does not include speculative statements or analysis of potential impacts beyond what is mentioned in the original text.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions