Xnio: stackoverflowexception when the chain of notifier states becomes problematically big
Priority MEDIUM 45CWE-400Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 7 fixed, 5 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.
Summary
A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.03479 89th percentileScored 2026-11-07
Fix Partial org.jboss.xnio:xnio-api (Maven): 3.8.14.FinalRed Hat: 7 advisoriesRed Hat: 7 fixed, 5 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat build of Apache Camel 4.4.0 for Spring Boot | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform | — | 3.8.11.SP1-redhat-00001 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 3.1.16-3.SP1_redhat_00001.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 1.7.6-2.redhat_00003.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 1.68.0-1.redhat_00005.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 1.4.197-2.redhat_00005.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 2.0.15-1.Final_redhat_00001.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 3.5.10-1.Final_redhat_00001.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 7.1.8-2.GA_redhat_00002.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 | — | 2.7.1-26.redhat_00015.1.ep7.el7 | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 3.4.10-1.SP1_redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 1.7.6-8.redhat_00003.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 1.4.197-3.redhat_00004.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 2.0.1-4.Final_redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 2.0.15-1.Final_redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 1.7.2-12.Final_redhat_00013.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 3.7.13-1.Final_redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 1.2.2-2.Final_redhat_00002.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 7.3.11-4.GA_redhat_00002.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 2.3.3-2.redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 2.7.1-38.redhat_00015.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | — | 2.2.3-2.redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | — | 3.8.11-1.SP1_redhat_00001.1.el8eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 | — | 3.8.11-1.SP1_redhat_00001.1.el9eap | Patch available | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | — | 3.8.11-1.SP1_redhat_00001.1.el7eap | Patch available | CNA |
| Red Hat | Red Hat build of Apache Camel for Spring Boot 3 | — | — | Not affected | CNA |
| Red Hat | Red Hat build of Apache Camel - HawtIO 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Build of Keycloak | — | — | Not affected | CNA |
| Red Hat | Red Hat Data Grid 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat Integration Camel K 1 | — | — | No fix listed | CNA |
| Red Hat | Red Hat JBoss Data Grid 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | — | — | Not affected | CNA |
| Red Hat | Red Hat JBoss Fuse Service Works 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Process Automation 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Single Sign-On 7 | — | — | Not affected | CNA |
| — | org.jboss.xnio:xnio-api (Maven) | before 3.8.14.Final | 3.8.14.Final | Patch available | GHSA-7f88-5hhx-67m2 |
- Red Hat build of Apache Camel 4.4.0 for Spring Boot VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform VendorRed Hat Affected — Fixed in 3.8.11.SP1-redhat-00001 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 3.1.16-3.SP1_redhat_00001.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.7.6-2.redhat_00003.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.68.0-1.redhat_00005.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.4.197-2.redhat_00005.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.0.15-1.Final_redhat_00001.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 3.5.10-1.Final_redhat_00001.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 7.1.8-2.GA_redhat_00002.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.7.1-26.redhat_00015.1.ep7.el7 Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 3.4.10-1.SP1_redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.7.6-8.redhat_00003.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.4.197-3.redhat_00004.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.0.1-4.Final_redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.0.15-1.Final_redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.7.2-12.Final_redhat_00013.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 3.7.13-1.Final_redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 1.2.2-2.Final_redhat_00002.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 7.3.11-4.GA_redhat_00002.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.3.3-2.redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.7.1-38.redhat_00015.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 VendorRed Hat Affected — Fixed in 2.2.3-2.redhat_00001.1.el7eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 VendorRed Hat Affected — Fixed in 3.8.11-1.SP1_redhat_00001.1.el8eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 VendorRed Hat Affected — Fixed in 3.8.11-1.SP1_redhat_00001.1.el9eap Patch available CNA
- Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 VendorRed Hat Affected — Fixed in 3.8.11-1.SP1_redhat_00001.1.el7eap Patch available CNA
- Red Hat build of Apache Camel for Spring Boot 3 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat build of Apache Camel - HawtIO 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Build of Keycloak VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Data Grid 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Integration Camel K 1 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat JBoss Data Grid 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat JBoss Enterprise Application Platform 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Enterprise Application Platform Expansion Pack VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat JBoss Fuse Service Works 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Process Automation 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Single Sign-On 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- org.jboss.xnio:xnio-api (Maven) Vendor— Affected before 3.8.14.Final Fixed in 3.8.14.Final Patch available GHSA-7f88-5hhx-67m2
CPE names CNA · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:apache-camel-spring-boot:4.4.0 | 4.4.0 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:7.4 | 7.4 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7 | 7.1 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7 | 7.3 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8 | 7.4 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9 | 7.4 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7 | 7.4 | — | Red Hat |
| cpe:/a:redhat:camel_spring_boot:3 | 3 | — | Red Hat |
| cpe:/a:redhat:apache_camel_hawtio:4 | 4 | — | Red Hat |
| cpe:/a:redhat:build_keycloak: | — | — | Red Hat |
- cpe:/a:redhat:apache-camel-spring-boot:4.4.0 Versions 4.4.0 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4 Versions 7.4 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.1::el7 Versions 7.1 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform_eus:7.3::el7 Versions 7.3 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8 Versions 7.4 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9 Versions 7.4 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7 Versions 7.4 — ·Red Hat
- cpe:/a:redhat:camel_spring_boot:3 Versions 3 — ·Red Hat
- cpe:/a:redhat:apache_camel_hawtio:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:build_keycloak: Versions — — ·Red Hat
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:jboss_data_grid:8 | 8 | — | Red Hat |
| cpe:/a:redhat:camel_k:1 | 1 | — | Red Hat |
| cpe:/a:redhat:jboss_data_grid:7 | 7 | — | Red Hat |
| cpe:/a:redhat:jboss_enterprise_application_platform:8 | 8 | — | Red Hat |
| cpe:/a:redhat:jbosseapxp | — | — | Red Hat |
| cpe:/a:redhat:jboss_fuse_service_works:6 | 6 | — | Red Hat |
| cpe:/a:redhat:jboss_bpms:7 | 7 | — | Red Hat |
| cpe:/a:redhat:red_hat_single_sign_on:7 | 7 | — | Red Hat |
- cpe:/a:redhat:jboss_data_grid:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:camel_k:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:jboss_data_grid:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:jboss_enterprise_application_platform:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:jbosseapxp Versions — — ·Red Hat
- cpe:/a:redhat:jboss_fuse_service_works:6 Versions 6 — ·Red Hat
- cpe:/a:redhat:jboss_bpms:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:red_hat_single_sign_on:7 Versions 7 — ·Red Hat
Remediation
- Fix · GHSA-7f88-5hhx-67m2 org.jboss.xnio:xnio-api (Maven) Fixed in 3.8.14.Final Advisory →
Red Hat 7 advisories
- RHSA-2024:10207 Released 2024-11-25 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.3.11 Security update
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server eap7-apache-cxf-3.4.10-1.SP1_redhat_00001.1.el7eap, eap7-apache-cxf-rt-3.4.10-1.SP1_redhat_00001.1.el7eap, eap7-apache-cxf-services-3.4.10-1.SP1_redhat_00001.1.el7eap +44
- RHSA-2024:10208 Released 2024-11-25 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server eap7-apache-cxf-3.1.16-3.SP1_redhat_00001.1.ep7.el7, eap7-apache-cxf-rt-3.1.16-3.SP1_redhat_00001.1.ep7.el7, eap7-apache-cxf-services-3.1.16-3.SP1_redhat_00001.1.ep7.el7 +14
- RHSA-2024:2707 Released 2024-05-06 · Red Hat rating ImportantRed Hat Build of Apache Camel security update
- Red Hat build of Apache Camel 4.4.0 for Spring Boot
Show 4 more Red Hat advisories
- RHSA-2023:7638 Released 2023-12-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 8 security update
- Red Hat JBoss EAP 7.4 for RHEL 8 eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el8eap, eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el8eap, eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el8eap +47
- RHSA-2023:7641 Released 2023-12-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.4.14 security update
- Red Hat JBoss Enterprise Application Platform com.google.guava.guava-32.1.1.jre-redhat-00001.jar, io.netty.netty-codec-http2-4.1.94.Final-redhat-00003.jar, io.undertow.undertow-core-2.2.28.SP1-redhat-00001.jar +4
- RHSA-2023:7637 Released 2023-12-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 7 security update
- Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el7eap, eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el7eap, eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el7eap +47
- RHSA-2023:7639 Released 2023-12-04 · Red Hat rating ImportantRed Hat JBoss Enterprise Application Platform 7.4.14 on RHEL 9 security update
- Red Hat JBoss EAP 7.4 for RHEL 9 eap7-activemq-artemis-2.16.0-17.redhat_00051.1.el9eap, eap7-activemq-artemis-cli-2.16.0-17.redhat_00051.1.el9eap, eap7-activemq-artemis-commons-2.16.0-17.redhat_00051.1.el9eap +47
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Integration Camel K 1 | Affected | No fix planned: Will not fix |
| Red Hat JBoss Data Grid 7 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Fuse Service Works 6 | Affected | No fix planned: Out of support scope |
| Red Hat Process Automation 7 | Affected | No fix planned: Will not fix |
| Red Hat build of Apache Camel - HawtIO 4 | Affected | No fix planned: Will not fix |
| Red Hat JBoss EAP 7.4 for RHEL 7 Server | Fixed | RHSA-2023:7637 |
| Red Hat JBoss EAP 7.4 for RHEL 8 | Fixed | RHSA-2023:7638 |
| Red Hat JBoss EAP 7.4 for RHEL 9 | Fixed | RHSA-2023:7639 |
| Red Hat JBoss Enterprise Application Platform | Fixed | RHSA-2023:7641 |
| Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 Server | Fixed | RHSA-2024:10208 |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 Server | Fixed | RHSA-2024:10207 |
| Red Hat build of Apache Camel 4.4.0 for Spring Boot | Fixed | RHSA-2024:2707 |
Not affected: 10 products
- Red Hat Build of Keycloak
- Red Hat Data Grid 8
- Red Hat JBoss EAP 7.4 for RHEL 7 Server
- Red Hat JBoss EAP 7.4 for RHEL 8
- Red Hat JBoss EAP 7.4 for RHEL 9
- Red Hat JBoss Enterprise Application Platform
- Red Hat JBoss Enterprise Application Platform 8
- Red Hat JBoss Enterprise Application Platform Expansion Pack
- Red Hat Single Sign-On 7
- Red Hat build of Apache Camel for Spring Boot 3
Timeline
- 2026-10-02 Threatist record created from CVE-2023-5685
- 2026-10-03 Alias added: GHSA-7f88-5hhx-67m2
References
Advisory 8
Other 6
- https://access.redhat.com/security/cve/CVE-2023-5685
- RHBZ#2241822
- https://github.com/xnio/xnio/commit/ffabdcdda508ef87aeadad5ca3f854e274d60ec1
- https://github.com/xnio/xnio
- https://github.com/xnio/xnio/blob/3.8.13.Final/api/src/main/java/org/xnio/AbstractIoFuture.java#L249
- https://issues.redhat.com/browse/XNIO-423
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-5685 · CVE Program
- CVE-2023-5685 · NVD
- FIRST EPSS
- GHSA-7f88-5hhx-67m2 · GitHub Advisory Database · CC BY 4.0
- CVE-2023-5685 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences