Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-35853
9.8
CRITICALCVSS v3
Published
June 19, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
OISF/suricata
GitHubSuricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.
GitHubSuricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community.< 6.0.13NVD