← Database

CVE-2023-1894

MEDIUM CVSS: 5.3 Published: 2023-05-04 Modified: 2026-06-17

Description

A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations.

Affected Platforms

Puppet Puppet EnterprisePuppet Puppet Server

Weakness Type

CWE-1333

References