Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 41

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00947 Published 2023-11-08 Fixed in 2023.2, 2023.1 Patch 2 +3 CWE-400
Priority MEDIUM 41

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the commit function was identified.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00946 Published 2023-11-08 Fixed in 2023.2, 2023.1 Patch 2 +3 CWE-400
TI-2023-24607 CVE-2023-45849 · GHSA-9rcv-5p26-mp8g

Arbitrary Code Execution in Helix Core

Priority MEDIUM 44

An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01115 Published 2023-11-08 Fixed in 2023.2, 2023.1 Patch 2 +3 CWE-94