What is CVE-2023-33141?

CVE-2023-33141 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

Which CVE IDs does CVE-2023-33141 cover?

CVE-2023-33141 covers the following CVE IDs: CVE-2023-33141. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-33141?

CVE-2023-33141 has a CVSS v3 base score of 7.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-33141?

CVE-2023-33141 affects 2 products, including: YARP 1.0; YARP 2.0.

CVE-2023-33141HighCVSS 7.5

Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

June 13, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-33141 →

📋 Description

Is the update for YARP 2.0 currently available? The security update for YARP 2.0 is not immediately available. The update will be released as soon as possible, and when it is available, customers will be notified via a revision to this CVE information.

🎯 Affected products2

YARP 1.0
YARP 2.0

✅ Remediation

KBRelease Notes (Security Update) — fixed build 1.1.2 KBRelease Notes (Security Update) — fixed build 2.0.1

🔗 References (4)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33141
patchhttps://www.nuget.org/packages/Yarp.ReverseProxy/1.1.2
referencehttps://github.com/microsoft/reverse-proxy/security/advisories/GHSA-jrjw-qgr2-wfcg
patchhttps://www.nuget.org/packages/Yarp.ReverseProxy/2.0.1