PT-2023-10282 · Unknown · Internalerror503 Forget It

CVE-2015-10103 · Publicado 2023-04-17 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions InternalError503 Forget It versions up to 1.3

Description A problematic issue was found in InternalError503 Forget It, affecting an unknown part of the file js/settings.js. The manipulation of the setForgetTime argument with the input 0 leads to an infinite loop. It is possible to launch the attack on the local host. Upgrading to version 1.4 is able to address this issue.

Recommendations For versions up to 1.3, upgrade to version 1.4 to address the issue. As a temporary workaround, consider restricting the use of the setForgetTime argument to prevent infinite loop exploitation.

Correção

Infinite Loop

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

CVE-2015-10103

Produtos afetados

Internalerror503 Forget It

Referências · 7

• https://github.com/InternalError503/forget-it/releases/tag/1.4 · Correção
• https://github.com/InternalError503/forget-it/commit/adf0c7fd59b9c935b4fd675c556265620124999c · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-10103 · Nota de Segurança
• https://vuldb.com/?id.226119 · Nota
• https://t.me/cvenotify/48451 · Publicação no Telegram
• https://t.me/cibsecurity/62299 · Publicação no Telegram
• https://vuldb.com/?ctiid.226119 · Nota