{"id":"EUVD-2023-1582","enisaUuid":"a759e0f9-b60a-3588-b153-208181c0825e","description":"A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.\n\n","datePublished":"May 30, 2023, 5:37:45 PM","dateUpdated":"Jan 9, 2025, 9:21:19 PM","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917\n","aliases":"CVE-2023-2968\nGHSA-mj6p-3pc9-wf5m\n","assigner":"JFROG","epss":1.48,"enisaIdProduct":[],"enisaIdVendor":[],"enisaIdVulnerability":[{"id":"c98063bb-4978-3360-bac6-033544890a13","vulnerability":{"id":"GHSA-mj6p-3pc9-wf5m","description":"proxy denial of service vulnerability","datePublished":"May 30, 2023, 6:30:23 PM","dateUpdated":"Jun 11, 2026, 2:17:07 PM","baseScore":null,"references":"https://nvd.nist.gov/vuln/detail/CVE-2023-2968\nhttps://github.com/TooTallNate/proxy-agents/pull/178\nhttps://github.com/TooTallNate/proxy-agents/commit/25e0c931390eb8f41c5ceaca72820de9198ece39\nhttps://github.com/TooTallNate/proxy-agents\nhttps://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917\n","enisa_id":"EUVD-2023-1582\n","aliases":"GHSA-mj6p-3pc9-wf5m\nCVE-2023-2968\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:52:17 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"cf4ed162-d465-3aa7-8abe-f01776c987c2","vulnerability":{"id":"CVE-2023-2968","description":"A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.\n\n","datePublished":"May 30, 2023, 5:37:45 PM","dateUpdated":"Jan 9, 2025, 9:21:19 PM","status":"PUBLISHED","baseScore":7.5,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":"https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917\n","enisa_id":"EUVD-2023-1582\n","assigner":"JFROG","epss":1.48,"dataProcessed":"Nov 3, 2026, 7:17:32 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}