CVE-2023-50728

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Dec 15, 2023
Updated: Dec 19, 2023
CWE ID 755

Summary

CVE-2023-50728 is a high-severity vulnerability that affects the octokit/webhooks toolset for Node.js versions 9.26.0 and prior. The vulnerability arises from an error handling issue in the @octokit/webhooks library, where an undefined error can cause an uncaught exception, leading to the termination of the nodejs process. The bug has been addressed and fixed in versions 9.26.3, 10.9.2, 11.1.2, and 12.0.4 of octokit/webhooks.js, app.js 14.02, octokit.js 3.1.2, and Protobot 12.3.3. This vulnerability poses a potential danger to organizations using affected versions as it could result in denial-of-service incidents if exploited by an attacker over the network without requiring any privileges or user interaction.

Note: The provided summary is based on the available information and does not include speculative statements or analysis of potential impacts beyond what is mentioned in the original text.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-50728 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options