High severity7.5NVD Advisory· Published Aug 25, 2023· Updated Jun 17, 2026
CVE-2023-40599
CVE-2023-40599
Description
Regular expression Denial-of-Service (ReDoS) exists in multiple add-ons for Mailform Pro CGI 4.3.1.3 and earlier, which allows a remote unauthenticated attacker to cause a denial-of-service condition. Affected add-ons are as follows: call/call.js, prefcodeadv/search.cgi, estimate/estimate.js, search/search.js, suggest/suggest.js, and coupon/coupon.js.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:synck_graphica:mailform_pro_cgi:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:synck_graphica:mailform_pro_cgi:*:*:*:*:*:*:*:*range: <=4.3.1.3
- (no CPE)range: 4.3.1.3 and earlier
- Range: <=4.3.1.3
Patches
Vulnerability mechanics
References
2- jvn.jp/en/jp/JVN86484824/nvdThird Party Advisory
- www.synck.com/blogs/news/newsroom/detail_1691668841.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.