{"id":"EUVD-2023-1582","revision":"bb6f62d649384923ad8bee6e6d50e433","records":[{"revision":"bb6f62d649384923ad8bee6e6d50e433","observedAt":"2026-11-10T01:24:37.644+00:00","statement":{"source":"euvd","id":"EUVD-2023-1582","aliases":["CVE-2023-2968","GHSA-mj6p-3pc9-wf5m"],"title":"A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.","description":"A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.\n\n","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5,"severity":null}],"references":["https://research.jfrog.com/vulnerabilities/undefined-variable-usage-in-proxy-leads-to-remote-denial-of-service-xray-520917"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-1582","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 30, 2023, 5:37:45 PM","dateUpdated":"Jan 9, 2025, 9:21:19 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-1582","identifiers":["EUVD-2023-1582","CVE-2023-2968","GHSA-mj6p-3pc9-wf5m"]},"retained":false,"historicalAffected":[]}],"coverage":[]}