CVE-2023-1894 – puppet: Puppet Server ReDoS

https://notcve.org/view.php?id=CVE-2023-1894

04 May 2023 — A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations. A Regular expression Denial of Service (ReDoS) issue was found in the Puppet Server 7.9.2 certificate validation. An issue related to specifically crafted certificate names significantly slowed down server operations. • https://www.puppet.com/security/cve/cve-2023-1894-puppet-server-redos • CWE-1333: Inefficient Regular Expression Complexity •