AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-33199

MEDIUM · CVSS 5.3 EPSS 0.67% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-05-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2023-33199
Severity
MEDIUM
CVSS
5.3
EPSS
0.67%

Original NVD Description

Rekor's goals are to provide an immutable tamper resistant ledger of metadata generated within a software projects supply chain. A malformed proposed entry of the `intoto/v0.0.2` type can cause a panic on a thread within the Rekor process. The thread is recovered so the client receives a 500 error message and service still continues, so the availability impact of this is minimal. This has been fixed in v1.2.0 of Rekor. Users are advised to upgrade. There are no known workarounds for this vulnerability.