CVE-2023-50572 Security Details

CVE ID

CVE-2023-50572

CWE

CWE-787

CVE Description

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.

Published

Jan 2, 2024

CVSS Score & Severity

5.5Medium

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

0.031%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

org/jline/builtins/ConsoleEngineImpl.highlightAndPrint(ILjava/lang/String;Ljava/lang/String;)V

JVMVulnerable params: 2

org/jline/console/impl/DefaultPrinter.highlightAndPrint(ILorg/jline/builtins/SyntaxHighlighter;Ljava/lang/String;Z)V

JVMVulnerable params: 2

Affected Ecosystems

affected

Source

National Vulnerability Database

References

GitHub · Advisory · GHSA-2268-98wh-qfhfTHIRD_PARTY