CVE-2023-22963

Summary

The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm
• https://github.com/advisories/GHSA-4xh4-v2pq-jvhm

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/personnummer/dart/security/advisories/GHSA-4xh4-v2pq-jvhm
• https://github.com/advisories/GHSA-4xh4-v2pq-jvhm

• ←Previous
• Next→