CVE-2023-1894

보통 5.3CVE-2023-1894 · Published 04/05/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
puppet enterprise puppet	`= 2021.7.1= 2023.0`	No fix yet
puppet server puppet	`= 7.9.2`	No fix yet

Description

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

References

puppet.com/security/cve/cve-2023-1894-puppet-server-redos · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free