GSD-2022-23496

Vulnerability from gsd - Updated: 2023-12-13 01:19
Details
Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library.
Aliases
Aliases
CVE-2022-23496
To clipboard 

{
  "GSD": {
    "alias": "CVE-2022-23496",
    "id": "GSD-2022-23496"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-23496"
      ],
      "details": "Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library.",
      "id": "GSD-2022-23496",
      "modified": "2023-12-13T01:19:34.877559Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security-advisories@github.com",
        "ID": "CVE-2022-23496",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "yauaa",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "\u003e= 7.0.0, \u003c 7.9.0"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "nielsbasjes"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-755",
                "lang": "eng",
                "value": "CWE-755: Improper Handling of Exceptional Conditions"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "refsource": "MISC",
            "url": "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h"
          },
          {
            "name": "https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e",
            "refsource": "MISC",
            "url": "https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e"
          }
        ]
      },
      "source": {
        "advisory": "GHSA-c4pm-63cg-9j7h",
        "discovery": "UNKNOWN"
      }
    },
    "gitlab.com": {
      "advisories": [
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8075",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8075",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-beam-sql",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "08cd492e-fff1-4767-b2c7-b82fcb87f2e4"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8074",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8074",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-beam",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "99883e42-5982-4de6-8e07-7b6a9558d687"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8076",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8076",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-drill",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "da8475c4-4f60-4343-a02c-25d91997ca0b"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8078",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8078",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-elasticsearch-8",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "e8fbf023-4a77-43e5-ab6d-8d0c3d671513"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8077",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8077",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-elasticsearch",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "329c5b75-0638-42c3-bf9b-9d661c5a664e"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8080",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8080",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-flink-table",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "5536422a-e7c5-428d-a43a-7a06499c7e9f"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8079",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8079",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-flink",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "15b62a7f-6288-483f-82ee-8ffe6a21777f"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8081",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8081",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-hive",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "59687c64-ebb5-4a91-8db4-0d25158a4d00"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "### Impact\nApplications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException.\n\nApplications that do not use this feature are not affected.\n\n### Patches\nUpgrade to 7.9.0\n\n### Workarounds\nCatch and discard any exceptions from Yauaa.\n",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8082",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8082",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-logparser",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "Yauaa vulnerable to ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "a2d425e3-3ca2-44de-be0c-1d21fa8cac40"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8083",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8083",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-nifi-processors",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "52452ed0-a5d5-4066-83c9-5e6318a67f25"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8084",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8084",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-snowflake",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "8fc4a8a2-efd8-497d-94b1-697543f4b081"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8085",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8085",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa-trino",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "acecefe5-2fcb-46fc-9274-99bef995c919"
        },
        {
          "affected_range": "[7.0.0,7.9.0)",
          "affected_versions": "All versions starting from 7.0.0 before 7.9.0",
          "cwe_ids": [
            "CWE-1035",
            "CWE-937"
          ],
          "date": "2022-12-08",
          "description": "Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an `ArrayIndexOutOfBoundsException`. Applications that do not use this feature are not affected.",
          "fixed_versions": [
            "7.9.0"
          ],
          "identifier": "GMS-2022-8073",
          "identifiers": [
            "GHSA-c4pm-63cg-9j7h",
            "GMS-2022-8073",
            "CVE-2022-23496"
          ],
          "not_impacted": "All versions before 7.0.0, all versions starting from 7.9.0",
          "package_slug": "maven/nl.basjes.parse.useragent/yauaa",
          "pubdate": "2022-12-08",
          "solution": "Upgrade to version 7.9.0 or above.",
          "title": "ArrayIndexOutOfBoundsException triggered by a crafted Sec-Ch-Ua-Full-Version-List",
          "urls": [
            "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
            "https://github.com/advisories/GHSA-c4pm-63cg-9j7h"
          ],
          "uuid": "1e57d7e1-bbc1-4027-a000-7286750f349c"
        }
      ]
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:yet_another_useragent_analyzer_project:yet_another_useragent_analyzer:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.9.0",
                "versionStartIncluding": "7.0.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security-advisories@github.com",
          "ID": "CVE-2022-23496"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Yet Another UserAgent Analyzer (Yauaa) is a java library that tries to parse and analyze the useragent string and extract as many relevant attributes as possible. Applications using the Client Hints analysis feature introduced with 7.0.0 can crash because the Yauaa library throws an ArrayIndexOutOfBoundsException. If uncaught the exception will result in a program crash. Applications that do not use this feature are not affected. Users are advised to upgrade to version 7.9.0. Users unable to upgrade may catch and discard any ArrayIndexOutOfBoundsException thrown by the Yauaa library."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-755"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://github.com/nielsbasjes/yauaa/commit/3017a866e2cff0d308f264b66fde4fa79e3beb9e"
            },
            {
              "name": "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://github.com/nielsbasjes/yauaa/security/advisories/GHSA-c4pm-63cg-9j7h"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2022-12-12T17:45Z",
      "publishedDate": "2022-12-08T22:15Z"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.