CVE-2023-22799 - CVE House
Back to Database
Status published Unknown CVE-2023-22799

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which...

Vulnerability Description

A ReDoS based DoS vulnerability in the GlobalID <1.0.1 which could allow an attacker supplying a carefully crafted input can cause the regular expression engine to take an unexpected amount of time. All users running an affected release should either upgrade or use one of the workarounds immediately.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22799

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

https://github.com/rails/globalid
Vulnerable Versions:
1.0.1

Timeline

Official Publish: February 9th, 2023
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)