CVE Vulnerabilities

CVE-2023-26513

Excessive Iteration

Published: Mar 20, 2023 | Modified: Nov 07, 2023

CVSS 3.x

7.5

HIGH

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-26513
CWE	https://cwe.mitre.org/data/definitions/834.html

Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

Name	Vendor	Start Version	End Version
Sling_resource_merger	Apache	1.2.0 (including)	1.4.2 (excluding)

References

https://lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.