CVE-2023-50572 - Vulnerability Details - OpenCVE

An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Jline	Jline

Configuration 1 [-]

cpe:2.3:a:jline:jline:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/jline/jline3/issues/909

History

Tue, 10 Nov 2026 21:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 05 Sep 2025 20:45:00 +0000

Type	Values Removed	Values Added
CPEs	cpe:2.3:a:jline:jline:3.24.1:::::::*	cpe:2.3:a:jline:jline::::::::

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-12-29T00:00:00.000Z

Updated: 2026-10-07T16:16:46.376Z

Reserved: 2023-12-11T00:00:00.000Z

Link: CVE-2023-50572

Vulnrichment

Updated: 2024-08-02T22:16:47.123Z

NVD

Status : Modified

Published: 2023-12-29T15:15:10.030

Modified: 2026-10-07T17:16:44.497

Link: CVE-2023-50572

Redhat

No data.

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jline:jline:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F247289-EF73-4FE5-90F5-F89FCDFA47DD", "versionEndExcluding": "3.25.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An issue in the component GroovyEngine.execute of jline-groovy v3.24.1 allows attackers to cause an OOM (OutofMemory) error."}, {"lang": "es", "value": "Un problema en el componente GroovyEngine.execute de jline-groovy v3.24.1 permite a los atacantes provocar un error OOM (OutofMemory)."}], "id": "CVE-2023-50572", "lastModified": "2026-10-07T17:16:44.497", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-50572", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-07T16:16:36.316451Z", "version": "2.0.3"}}]}, "published": "2023-12-29T15:15:10.030", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/jline/jline3/issues/909"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Issue Tracking"], "url": "https://github.com/jline/jline3/issues/909"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}