CVE-2023-33950
Published: 24 May 2023
Summary
CVE-2023-33950 is a medium-severity Inefficient Regular Expression Complexity (CWE-1333) vulnerability in Liferay Digital Experience Platform. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 28.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-1525
Vulnerability details
Pattern Redirects in Liferay Portal 7.4.3.48 through 7.4.3.76, and Liferay DXP 7.4 update 48 through 76 allows regular expressions that are vulnerable to ReDoS attacks to be used as patterns, which allows remote attackers to consume an excessive amount of…
more
server resources via crafted request URLs.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.