PT-2022-19730 · Unknown · Cla-Assistant

Teo Klestrup Röijezon · Published 2022-06-06 · Updated 2022-10-05 · CVE-2022-29617

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions CLA assistant (affected versions not specified)

Description The issue is due to improper error handling, allowing an authenticated user to crash the CLA assistant instance, which could impact the application's availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-29617

GHSA-JJJV-GRGR-V8H3

Affected Products

Cla-Assistant

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-29617 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29617 · Vendor Advisory
• https://github.com/cla-assistant/cla-assistant/security/advisories/GHSA-jjjv-grgr-v8h3 · Note
• https://t.me/cibsecurity/43895 · Telegram Post
• https://t.me/cvenotify/31208 · Telegram Post
• https://t.me/cvenotify/31179 · Telegram Post
• https://t.me/cvenotify/31601 · Telegram Post