VDB
CVE-2023-35853
CVE-2023-35853
PUBLISHED
CVSS 9.800000190734863 CRITICAL
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
EPSS 1.03% · 63.5th percentile
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.03%
63.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| oisf | suricata | 0 |
Timeline
- Jun 19, 2023 CVE Published
- Jun 19, 2023 EPSS Score
- Jul 25, 2023 EPSS Score
- Aug 30, 2023 EPSS Score
- Nov 11, 2023 EPSS Score
- Dec 17, 2023 EPSS Score
- Jan 22, 2024 EPSS Score
- Feb 27, 2024 EPSS Score
- Apr 3, 2024 EPSS Score
- Jun 15, 2024 EPSS Score
- Jul 21, 2024 EPSS Score
- Aug 26, 2024 EPSS Score