CVE-2023-0247

Uncontrolled Search Path Element in bits-and-blooms/bloom

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.

Affected

bits-and-blooms · bits-and-blooms/bloom

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2023-01-12

Updated

2025-04-07

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/cab50e44-0995-4ac1-a5d5-889293b9704f

Security advisories

• bits-and-blooms/bloom/commit/658f1393d4c52254a3d22f5f64f217405ec5fefb
• advisories/GHSA-fgwp-pwqq-g3w4

References

• CVE Record
• NVD entry