Puppet Puppet Server
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-1894 | 7.9.2 – < 7.11.0 ; 7.9.2 – < 8.0.0 | A Regular Expression Denial of Service (ReDoS) issue was discovered in Puppet Server 7.9.2 certificate validation. An issue related to speci | MEDIUM 5.3 | 0.4 % | ||
| CVE-2017-2295 | Puppet prior to 4.10.1 | Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified | HIGH 8.2 | 2.8 % |