CVE-2022-23990

CVE Details

CVE-2022-23990

Last Update

9/25/24

NIST CVE Summary

Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.

Our Official Summary

Waiting on a fix from third party mongodb vendor

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

• Palette VerteX 4.4.14

Revision History

• 1.0 08/16/2024 Initial Publications
• 2.0 08/17/2024 Added Palette VerteX 4.4.14 to Affected Products
• 3.0 09/25/2024 CVE remediated in Palette VerteX 4.4.18