VULNERABILITY INTELLIGENCE

CVE-2021-32848

CVSS score7.5 HIGH

EPSS probability1.04%

CISA KEVNot currently listed

Published2023-02-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

Weakness classification

security-advisories@github.com: CWE-770
nvd@nist.gov: CWE-1333

Primary references

security-advisories@github.com — Exploit, Product
security-advisories@github.com — Patch
security-advisories@github.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Product
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory