CVE-2023-7279

Description

A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 524b73ff7306707f6d3a4d1e86401479bca91b02. It is recommended to upgrade the affected component.

CVSS v3.1 Score

2.6

LOW

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

CWE-1333 CWE-1333

Affected Products

Vendor	Product	Versions
securesystems	connaisseur	< 3.3.1

References

Advisories & Patches

https://github.com/sse-secure-systems/connaisseur/commit/524b73ff7306707f6d3a4d1e86401479bca91b02 https://github.com/sse-secure-systems/connaisseur/pull/1407

Other References

https://github.com/sse-secure-systems/connaisseur/releases/tag/v3.3.1 https://vuldb.com/?ctiid.276268 https://vuldb.com/?id.276268

Frequently Asked Questions

What is CVE-2023-7279? +

A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affects unknown code of the file connaisseur/res/targets_schema.json of the component Delegation Name Handler. The manipulation leads to inefficient regular expression complexity. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 524b73ff7306707f6d3a4d1e86401479bca91b02. It is recommended to upgrade the affected component. It has a CVSS v3.1 base score of 2.6 (LOW).

How severe is CVE-2023-7279? +

CVE-2023-7279 has a CVSS v3.1 score of 2.6 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2023-7279? +

CVE-2023-7279 affects products from securesystems, specifically: connaisseur. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2023-7279? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-45409

Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA …

CVE-2025-48058

PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, there is a …

CVE-2025-48059

PowSyBl (Power System Blocks) is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 …

CVE-2025-6998

ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service …

CVE-2025-54363

Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. extract_full_summary_from_signature employs an inefficient regular expression …

CVE-2025-54364

Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module. option_descriptions employs an inefficient regular expression …