Vulnerabilities > CVE-2023-50728 - Improper Handling of Exceptional Conditions vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

octokit

probot

CWE-755

NVD

Published: 2023-12-15

Updated: 2023-12-19

Summary

octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused by an issue with error handling in the @octokit/webhooks library because the error can be undefined in some cases. The resulting request was found to cause an uncaught exception that ends the nodejs process. The bug is fixed in octokit/webhooks.js 9.26.3, 10.9.2, 11.1.2, and 12.0.4, app.js 14.02, octokit.js 3.1.2, and Protobot 12.3.3.

Vulnerable Configurations

Part	Description	Count
Application	Octokit Octokit Octokit - Octokit Octokit 0.1.6 Octokit Octokit 0.9.0 Octokit Octokit 0.9.1 Octokit Octokit 0.9.2 Octokit Octokit 0.9.3 Octokit Octokit 0.9.6 Octokit Octokit 0.9.7 Octokit Octokit 0.9.8 Octokit Octokit 0.9.9 Octokit Octokit 0.9.10 Octokit Octokit 0.9.11 Octokit Octokit 0.9.12 Octokit Octokit 0.9.14 Octokit Octokit 0.9.16 Octokit Octokit 0.9.17 Octokit Octokit 0.9.18 Octokit Octokit 0.9.19 Octokit Octokit 0.9.20 Octokit Octokit 0.10.0 Octokit Octokit 0.10.1 Octokit Octokit 0.10.2 Octokit Octokit 0.10.3 Octokit Octokit 0.10.4 Octokit Octokit 1.0.0 Octokit Octokit 1.0.1 Octokit Octokit 1.0.2 Octokit Octokit 1.0.3 Octokit Octokit 1.0.4 Octokit Octokit 1.0.5 Octokit Octokit 1.0.6 Octokit Octokit 1.1.0 Octokit Octokit 1.2.0 Octokit Octokit 1.3.0 Octokit Octokit 1.4.0 Octokit Octokit 1.5.0 Octokit Octokit 1.6.0 Octokit Octokit 1.6.1 Octokit Octokit 1.6.2 Octokit Octokit 1.7.0 Octokit Octokit 1.7.1 Octokit Octokit 1.7.2 Octokit Octokit 1.8.0 Octokit Octokit 1.8.1 Octokit Octokit 2.0.0 Octokit Octokit 2.0.1 Octokit Octokit 2.0.2 Octokit Octokit 2.0.3 Octokit Octokit 2.0.4 Octokit Octokit 2.0.5 Octokit Octokit 2.0.6 Octokit Octokit 2.0.7 Octokit Octokit 2.0.8 Octokit Octokit 2.0.9 Octokit Octokit 2.0.10 Octokit Octokit 2.0.11 Octokit Octokit 2.0.12 Octokit Octokit 2.0.13 Octokit Octokit 2.0.14 Octokit Octokit 2.0.15 Octokit Octokit 2.0.16 Octokit Octokit 2.0.17 Octokit Octokit 2.0.18 Octokit Octokit 2.0.19 Octokit Octokit 2.0.20 Octokit Octokit 2.0.21 Octokit Octokit 2.0.22 Octokit Octokit 2.1.0 Octokit Octokit 3.0.0 Octokit Octokit 3.1.0 Octokit Octokit 3.1.1 Octokit APP 14.0.1 Octokit Webhooks 12.0.0 Octokit Webhooks 12.0.1 Octokit Webhooks 12.0.2 Octokit Webhooks 12.0.3 Octokit Webhooks 11.0.0 Octokit Webhooks 11.1.0 Octokit Webhooks 11.1.1 Octokit Webhooks 10.0.0 Octokit Webhooks 10.0.1 Octokit Webhooks 10.0.2 Octokit Webhooks 10.0.3 Octokit Webhooks 10.0.4 Octokit Webhooks 10.0.5 Octokit Webhooks 10.0.6 Octokit Webhooks 10.0.7 Octokit Webhooks 10.0.8 Octokit Webhooks 10.0.9 Octokit Webhooks 10.1.0 Octokit Webhooks 10.1.1 Octokit Webhooks 10.1.2 Octokit Webhooks 10.1.3 Octokit Webhooks 10.1.4 Octokit Webhooks 10.1.5 Octokit Webhooks 10.2.0 Octokit Webhooks 10.3.0 Octokit Webhooks 10.3.1 Octokit Webhooks 10.4.0 Octokit Webhooks 10.5.0 Octokit Webhooks 10.5.1 Octokit Webhooks 10.6.0 Octokit Webhooks 10.6.1 Octokit Webhooks 10.6.2 Octokit Webhooks 10.7.0 Octokit Webhooks 10.7.1 Octokit Webhooks 10.7.2 Octokit Webhooks 10.7.3 Octokit Webhooks 10.8.0 Octokit Webhooks 10.9.0 Octokit Webhooks 10.9.1 Octokit Webhooks - Octokit Webhooks 1.0.0 Octokit Webhooks 2.0.0 Octokit Webhooks 3.0.0 Octokit Webhooks 3.0.1 Octokit Webhooks 3.0.2 Octokit Webhooks 3.1.0 Octokit Webhooks 3.1.1 Octokit Webhooks 4.0.0 Octokit Webhooks 5.0.0 Octokit Webhooks 5.0.1 Octokit Webhooks 5.0.2 Octokit Webhooks 5.0.3 Octokit Webhooks 5.1.0 Octokit Webhooks 5.1.1 Octokit Webhooks 5.1.2 Octokit Webhooks 5.2.0 Octokit Webhooks 5.3.0 Octokit Webhooks 5.3.1 Octokit Webhooks 5.3.2 Octokit Webhooks 5.3.3 Octokit Webhooks 5.3.4 Octokit Webhooks 5.4.0 Octokit Webhooks 5.4.1 Octokit Webhooks 6.0.0 Octokit Webhooks 6.0.1 Octokit Webhooks 6.1.0 Octokit Webhooks 6.2.0 Octokit Webhooks 6.2.1 Octokit Webhooks 6.2.2 Octokit Webhooks 6.3.0 Octokit Webhooks 6.3.1 Octokit Webhooks 6.3.2 Octokit Webhooks 7.0.0 Octokit Webhooks 7.1.0 Octokit Webhooks 7.1.1 Octokit Webhooks 7.1.2 Octokit Webhooks 7.2.0 Octokit Webhooks 7.3.0 Octokit Webhooks 7.4.0 Octokit Webhooks 7.5.0 Octokit Webhooks 7.6.0 Octokit Webhooks 7.6.1 Octokit Webhooks 7.6.2 Octokit Webhooks 7.6.3 Octokit Webhooks 7.6.4 Octokit Webhooks 7.6.5 Octokit Webhooks 7.7.0 Octokit Webhooks 7.8.0 Octokit Webhooks 7.8.1 Octokit Webhooks 7.8.2 Octokit Webhooks 7.9.0 Octokit Webhooks 7.9.1 Octokit Webhooks 7.9.2 Octokit Webhooks 7.9.3 Octokit Webhooks 7.9.4 Octokit Webhooks 7.10.0 Octokit Webhooks 7.11.0 Octokit Webhooks 7.11.1 Octokit Webhooks 7.11.2 Octokit Webhooks 7.11.3 Octokit Webhooks 7.11.4 Octokit Webhooks 7.12.0 Octokit Webhooks 7.12.1 Octokit Webhooks 7.12.2 Octokit Webhooks 7.13.0 Octokit Webhooks 7.13.1 Octokit Webhooks 7.14.0 Octokit Webhooks 7.15.0 Octokit Webhooks 7.15.1 Octokit Webhooks 7.15.2 Octokit Webhooks 7.16.0 Octokit Webhooks 7.16.1 Octokit Webhooks 7.17.0 Octokit Webhooks 7.18.0 Octokit Webhooks 7.18.1 Octokit Webhooks 7.18.2 Octokit Webhooks 7.18.3 Octokit Webhooks 7.19.0 Octokit Webhooks 7.20.0 Octokit Webhooks 7.20.1 Octokit Webhooks 7.21.0 Octokit Webhooks 7.22.0 Octokit Webhooks 7.23.0 Octokit Webhooks 7.24.0 Octokit Webhooks 7.24.1 Octokit Webhooks 7.24.2 Octokit Webhooks 7.24.3 Octokit Webhooks 8.0.0 Octokit Webhooks 8.0.1 Octokit Webhooks 8.0.2 Octokit Webhooks 8.0.3 Octokit Webhooks 8.1.0 Octokit Webhooks 8.1.1 Octokit Webhooks 8.2.0 Octokit Webhooks 8.3.0 Octokit Webhooks 8.4.0 Octokit Webhooks 8.4.1 Octokit Webhooks 8.5.0 Octokit Webhooks 8.5.1 Octokit Webhooks 8.5.2 Octokit Webhooks 8.5.3 Octokit Webhooks 8.5.4 Octokit Webhooks 8.6.0 Octokit Webhooks 8.6.1 Octokit Webhooks 8.6.2 Octokit Webhooks 8.7.0 Octokit Webhooks 8.7.1 Octokit Webhooks 8.7.2 Octokit Webhooks 8.8.0 Octokit Webhooks 8.8.1 Octokit Webhooks 8.8.2 Octokit Webhooks 8.8.3 Octokit Webhooks 8.9.0 Octokit Webhooks 8.10.0 Octokit Webhooks 8.10.1 Octokit Webhooks 8.11.0 Octokit Webhooks 8.11.1 Octokit Webhooks 8.11.2 Octokit Webhooks 8.12.0 Octokit Webhooks 8.12.1 Octokit Webhooks 8.12.2 Octokit Webhooks 8.12.3 Octokit Webhooks 9.0.0 Octokit Webhooks 9.0.1 Octokit Webhooks 9.1.0 Octokit Webhooks 9.1.1 Octokit Webhooks 9.1.2 Octokit Webhooks 9.2.0 Octokit Webhooks 9.3.0 Octokit Webhooks 9.4.0 Octokit Webhooks 9.5.0 Octokit Webhooks 9.5.1 Octokit Webhooks 9.6.0 Octokit Webhooks 9.6.1 Octokit Webhooks 9.6.2 Octokit Webhooks 9.6.3 Octokit Webhooks 9.7.0 Octokit Webhooks 9.8.0 Octokit Webhooks 9.8.1 Octokit Webhooks 9.8.2 Octokit Webhooks 9.8.3 Octokit Webhooks 9.8.4 Octokit Webhooks 9.9.0 Octokit Webhooks 9.10.0 Octokit Webhooks 9.11.0 Octokit Webhooks 9.12.0 Octokit Webhooks 9.13.0 Octokit Webhooks 9.14.0 Octokit Webhooks 9.14.1 Octokit Webhooks 9.14.2 Octokit Webhooks 9.15.0 Octokit Webhooks 9.15.1 Octokit Webhooks 9.16.0 Octokit Webhooks 9.17.0 Octokit Webhooks 9.18.0 Octokit Webhooks 9.19.0 Octokit Webhooks 9.20.0 Octokit Webhooks 9.21.0 Octokit Webhooks 9.22.0 Octokit Webhooks 9.23.0 Octokit Webhooks 9.24.0 Octokit Webhooks 9.25.0 Octokit Webhooks 9.26.0 Octokit Webhooks 9.26.1 Octokit Webhooks 9.26.2	300
Application	Probot Probot Probot - Probot Probot 0.2.0 Probot Probot 0.2.1 Probot Probot 0.3.0 Probot Probot 0.3.1 Probot Probot 0.3.2 Probot Probot 0.3.3 Probot Probot 0.4.0 Probot Probot 0.4.1 Probot Probot 0.5.0 Probot Probot 0.5.1 Probot Probot 0.6.0 Probot Probot 0.7.0 Probot Probot 0.7.1 Probot Probot 0.7.2 Probot Probot 0.7.3 Probot Probot 0.7.4 Probot Probot 0.7.5 Probot Probot 0.8.0 Probot Probot 0.9.0 Probot Probot 0.9.1 Probot Probot 0.10.0 Probot Probot 0.11.0 Probot Probot 1.0.0 Probot Probot 1.1.0 Probot Probot 2.0.0 Probot Probot 3.0.0 Probot Probot 3.0.1 Probot Probot 3.0.2 Probot Probot 3.0.3 Probot Probot 4.0.0 Probot Probot 4.1.0 Probot Probot 5.0.0 Probot Probot 5.0.1 Probot Probot 6.0.0 Probot Probot 6.1.0 Probot Probot 6.2.0 Probot Probot 6.2.1 Probot Probot 7.0.0 Probot Probot 7.0.1 Probot Probot 7.1.0 Probot Probot 7.1.1 Probot Probot 7.2.0 Probot Probot 7.3.0 Probot Probot 7.3.1 Probot Probot 7.4.0 Probot Probot 7.5.0 Probot Probot 7.5.1 Probot Probot 8.0.0 Probot Probot 8.0.1 Probot Probot 8.0.2 Probot Probot 9.0.0 Probot Probot 9.0.1 Probot Probot 9.0.2 Probot Probot 9.1.0 Probot Probot 9.1.1 Probot Probot 9.2.0 Probot Probot 9.2.1 Probot Probot 9.2.2 Probot Probot 9.2.3 Probot Probot 9.2.4 Probot Probot 9.2.5 Probot Probot 9.2.6 Probot Probot 9.2.7 Probot Probot 9.2.8 Probot Probot 9.2.9 Probot Probot 9.2.10 Probot Probot 9.2.11 Probot Probot 9.2.12 Probot Probot 9.2.13 Probot Probot 9.2.14 Probot Probot 9.2.15 Probot Probot 9.2.16 Probot Probot 9.2.17 Probot Probot 9.2.18 Probot Probot 9.2.19 Probot Probot 9.2.20 Probot Probot 9.3.0 Probot Probot 9.3.1 Probot Probot 9.3.2 Probot Probot 9.3.3 Probot Probot 9.3.4 Probot Probot 9.4.0 Probot Probot 9.5.0 Probot Probot 9.5.1 Probot Probot 9.5.2 Probot Probot 9.5.3 Probot Probot 9.6.0 Probot Probot 9.6.1 Probot Probot 9.6.2 Probot Probot 9.6.3 Probot Probot 9.6.4 Probot Probot 9.6.5 Probot Probot 9.6.6 Probot Probot 9.7.0 Probot Probot 9.8.0 Probot Probot 9.8.1 Probot Probot 9.9.0 Probot Probot 9.9.1 Probot Probot 9.9.2 Probot Probot 9.9.3 Probot Probot 9.9.4 Probot Probot 9.9.5 Probot Probot 9.9.6 Probot Probot 9.9.7 Probot Probot 9.9.8 Probot Probot 9.10.0 Probot Probot 9.10.1 Probot Probot 9.10.2 Probot Probot 9.11.0 Probot Probot 9.11.1 Probot Probot 9.11.2 Probot Probot 9.11.3 Probot Probot 9.11.4 Probot Probot 9.11.5 Probot Probot 9.11.6 Probot Probot 9.11.7 Probot Probot 9.12.0 Probot Probot 9.13.0 Probot Probot 9.13.1 Probot Probot 9.13.2 Probot Probot 9.14.0 Probot Probot 9.14.1 Probot Probot 9.14.2 Probot Probot 9.15.0 Probot Probot 9.15.1 Probot Probot 10.0.0 Probot Probot 10.0.1 Probot Probot 10.1.0 Probot Probot 10.1.1 Probot Probot 10.1.2 Probot Probot 10.1.3 Probot Probot 10.1.4 Probot Probot 10.1.5 Probot Probot 10.2.0 Probot Probot 10.3.0 Probot Probot 10.4.0 Probot Probot 10.4.1 Probot Probot 10.5.0 Probot Probot 10.6.0 Probot Probot 10.7.0 Probot Probot 10.7.1 Probot Probot 10.8.0 Probot Probot 10.8.1 Probot Probot 10.9.0 Probot Probot 10.9.1 Probot Probot 10.9.2 Probot Probot 10.9.3 Probot Probot 10.9.4 Probot Probot 10.9.5 Probot Probot 10.10.0 Probot Probot 10.10.1 Probot Probot 10.10.2 Probot Probot 10.11.0 Probot Probot 10.12.0 Probot Probot 10.13.0 Probot Probot 10.14.0 Probot Probot 10.14.1 Probot Probot 10.15.0 Probot Probot 10.16.0 Probot Probot 10.17.0 Probot Probot 10.17.1 Probot Probot 10.17.2 Probot Probot 10.17.3 Probot Probot 10.18.0 Probot Probot 10.19.0 Probot Probot 11.0.0 Probot Probot 11.0.1 Probot Probot 11.0.2 Probot Probot 11.0.3 Probot Probot 11.0.4 Probot Probot 11.0.5 Probot Probot 11.0.6 Probot Probot 11.1.0 Probot Probot 11.1.1 Probot Probot 11.2.0 Probot Probot 11.2.1 Probot Probot 11.2.2 Probot Probot 11.2.3 Probot Probot 11.2.4 Probot Probot 11.3.0 Probot Probot 11.3.1 Probot Probot 11.3.2 Probot Probot 11.4.0 Probot Probot 11.4.1 Probot Probot 12.0.0 Probot Probot 12.1.0 Probot Probot 12.1.1 Probot Probot 12.1.2 Probot Probot 12.1.3 Probot Probot 12.1.4 Probot Probot 12.2.0 Probot Probot 12.2.1 Probot Probot 12.2.2 Probot Probot 12.2.3 Probot Probot 12.2.4 Probot Probot 12.2.5 Probot Probot 12.2.6 Probot Probot 12.2.7 Probot Probot 12.2.8 Probot Probot 12.2.9 Probot Probot 12.3.0 Probot Probot 12.3.1 Probot Probot 12.3.2	262

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References