Vulnerabilities > CVE-2021-32848 - Unspecified vulnerability in Octobox Project Octobox

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
octobox-project
NVD
Published: 2023-02-20
Updated: 2024-11-21

Summary

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

Vulnerable Configurations

Part Description Count
Application
Octobox_Project
1

References