CVE-2023-35767

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the shutdown function was identified. Reported by Jason Geffner.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
Helix	Helix Core	>= 0.0.0, < 2023.2; >= 0.0.0, < 2023.1 Patch 2; >= 0.0.0, < 2022.2 Patch 3; >= 0.0.0, < 2022.1 Patch 6; >= 0.0.0, < 2021.2 Patch 10
Helix	Helix Swarm	>= 0.0.0, < 2024.1
perforce	helix_core	< 2023.1\/patch_2\/; >= 0.0.0, < 2022.2\/patch_3\/; >= 0.0.0, < 2022.1\/patch_6\/; >= 0.0.0, < 2021.2\/patch_10\/

References

https://perforce.comVendor Advisory
https://perforce.comVendor Advisory

Timeline

Published: Nov 8, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-357697.8Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escala CVE-2023-35774.3Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform CVE-2023-357726.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <= 3.1.2 versions.CVE-2023-357738.8Cross-Site Request Forgery (CSRF) vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin <= 3.1.2 versions.CVE-2023-357748.8Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions.CVE-2023-357756.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP Backup Solutions WP Backup Manager plugin <= 1.13.1 versions.CVE-2023-357765.4Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Beplus Sermon'e – Sermons Online plugin <= 1.0.0 versions.CVE-2023-357775.3Missing Authorization vulnerability in The Events Calendar The Events Calendar allows Exploiting Incorrectly Configured Access Control Secur CVE-2023-357786.5Cross-Site Request Forgery (CSRF) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions.CVE-2023-357794.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Seed Webs Seed Fonts plugin <= 2.3.1 versions.CVE-2023-35789.8A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functionality of the file CVE-2023-357806.5Cross-Site Request Forgery (CSRF) vulnerability in Andy Whalen Galleria plugin <= 1.0.3 versions.