CVE-2023-38210

Severity
5.5MEDIUM
EPSS
0.1%
top 70.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 10

Description

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-ff3w-9cgh-8h6x: Adobe XMP Toolkit versions 20222023-08-10
CVEList
Other | Uncontrolled Resource Consumption (CWE-400)2023-08-10

📋Vendor Advisories

1
Red Hat
xmpcore: Uncontrolled Resource Consumption2023-08-10
CVE-2023-38210 (MEDIUM CVSS 5.5) | Adobe XMP Toolkit versions 2022.06 | cvebase.io