CVE-2022-47925: Csaf-Validator-Lib Project Csaf-Validator-Lib

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a partial DoS of the service. Only the request of the attacker is affected by this vulnerability.

Affected products

• Csaf-Validator-Lib Project Csaf-Validator-Lib: before 0.1.0 (fixed in 0.1.0)

Published 2023-03-27. Last modified 2026-06-17.