CVE-2023-34623

jtidy: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-34623: An issue...

CVE-2023-34623 is fixed in 2 products on 1 platform, first by ALAS2023-2024-478, released January 3, 2024. It is not reported as exploited. Patch Radar priority: Routine.

Routine

CVSS

n/a

moderate

Exploitation

None reported

No vendor assessment

CISA KEV

Not listed

Not in the Known Exploited Vulnerabilities catalog

EPSS

0.0087

58th percentile

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-34623: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

Where it's fixed

Product	Fixed in	Fix	Released
Linux
jtidy · amzn 2023	2:1.0-0.38.20100930svn1125.amzn2023.0.2	ALAS2023-2024-478	Jan 3, 2024
jtidy-javadoc · amzn 2023	2:1.0-0.38.20100930svn1125.amzn2023.0.2	ALAS2023-2024-478	Jan 3, 2024

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.