medium5.3
CVE-2023-1894
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation.
Impact
A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Puppet | Puppet Enterprise | Versions 2021.7.1, 2023.0 |
| Puppet | Puppet Server | Version 7.9.2 |