VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions 1 Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2026/8xxx/CVE-2026-8469.json
T

288 lines
14 KiB
JSON
Raw Blame History

{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-8469",
"assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"state": "PUBLISHED",
"assignerShortName": "EEF",
"dateReserved": "2026-05-13T11:44:43.316Z",
"datePublished": "2026-05-20T13:35:27.914Z",
"dateUpdated": "2026-05-27T15:40:55.927Z"
},
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://repo.hex.pm",
"cpes": [
"cpe:2.3:a:phenixdigital:phoenix_storybook:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"Elixir.PhoenixStorybook.ExtraAssignsHelpers",
"Elixir.PhoenixStorybook.Story.Playground"
],
"packageName": "phoenix_storybook",
"packageURL": "pkg:hex/phoenix_storybook",
"product": "phoenix_storybook",
"programFiles": [
"lib/phoenix_storybook/helpers/extra_assigns_helpers.ex",
"lib/phx_live_storybook/live/entry_live.ex"
],
"programRoutines": [
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_set_variation_assign/3"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_toggle_variation_assign/3"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_variation_id/2"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_value/4"
}
],
"repo": "https://github.com/phenixdigital/phoenix_storybook",
"vendor": "phenixdigital",
"versions": [
{
"lessThan": "1.1.0",
"status": "affected",
"version": "0.2.0",
"versionType": "semver"
}
]
},
{
"collectionURL": "https://github.com",
"cpes": [
"cpe:2.3:a:phenixdigital:phoenix_storybook:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"modules": [
"Elixir.PhoenixStorybook.ExtraAssignsHelpers",
"Elixir.PhoenixStorybook.Story.Playground"
],
"packageName": "phenixdigital/phoenix_storybook",
"packageURL": "pkg:github/phenixdigital/phoenix_storybook",
"product": "phoenix_storybook",
"programFiles": [
"lib/phoenix_storybook/helpers/extra_assigns_helpers.ex",
"lib/phx_live_storybook/live/entry_live.ex"
],
"programRoutines": [
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_set_variation_assign/3"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_toggle_variation_assign/3"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_variation_id/2"
},
{
"name": "'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_value/4"
}
],
"repo": "https://github.com/phenixdigital/phoenix_storybook",
"vendor": "phenixdigital",
"versions": [
{
"lessThan": "96d524690af0fe197a49f60d18e564a620b9ef81",
"status": "affected",
"version": "0228669d55c23a754d1ef11f49a32121129d5395",
"versionType": "git"
}
]
}
],
"configurations": [
{
"lang": "en",
"value": "Phoenix Storybook must be mounted on a network-reachable route."
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:phenixdigital:phoenix_storybook:*:*:*:*:*:*:*:*",
"versionEndExcluding": "1.1.0",
"versionStartIncluding": "0.2.0",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Peter Ullrich"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Christian Blavier"
},
{
"lang": "en",
"type": "analyst",
"value": "Jonatan Männchen / EEF"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<p>Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion.</p><p>Multiple LiveView event handlers convert user-supplied event parameter strings to atoms using <tt>String.to_atom/1</tt> without validation: <tt>'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_set_variation_assign/3</tt> interns every key of the <tt>psb-assign</tt> params map; <tt>'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_toggle_variation_assign/3</tt> interns the <tt>\"attr\"</tt> value from <tt>psb-toggle</tt> events; <tt>'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_variation_id/2</tt> interns elements of <tt>\"variation_id\"</tt>; and <tt>'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_value/4</tt> interns raw string values for attributes declared as <tt>:atom</tt> or <tt>:boolean</tt>. BEAM atoms are never garbage-collected, so each unique attacker-controlled string is a permanent allocation. Once the atom table ceiling (~1,048,576 atoms) is reached, the entire BEAM node aborts, taking down all applications running on it.</p><p>This issue affects phoenix_storybook from 0.2.0 before 1.1.0.</p>"
}
],
"value": "Allocation of Resources Without Limits or Throttling vulnerability in phenixdigital phoenix_storybook allows unauthenticated denial-of-service via BEAM atom table exhaustion.\n\nMultiple LiveView event handlers convert user-supplied event parameter strings to atoms using String.to_atom/1 without validation: 'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_set_variation_assign/3 interns every key of the psb-assign params map; 'Elixir.PhoenixStorybook.ExtraAssignsHelpers':handle_toggle_variation_assign/3 interns the \"attr\" value from psb-toggle events; 'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_variation_id/2 interns elements of \"variation_id\"; and 'Elixir.PhoenixStorybook.ExtraAssignsHelpers':to_value/4 interns raw string values for attributes declared as :atom or :boolean. BEAM atoms are never garbage-collected, so each unique attacker-controlled string is a permanent allocation. Once the atom table ceiling (~1,048,576 atoms) is reached, the entire BEAM node aborts, taking down all applications running on it.\n\nThis issue affects phoenix_storybook from 0.2.0 before 1.1.0."
}
],
"impacts": [
{
"capecId": "CAPEC-130",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-130 Excessive Allocation"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "PRESENT",
"attackVector": "NETWORK",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"privilegesRequired": "NONE",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-770",
"description": "CWE-770 Allocation of Resources Without Limits or Throttling",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db",
"shortName": "EEF",
"dateUpdated": "2026-05-27T15:40:55.927Z"
},
"references": [
{
"tags": [
"vendor-advisory",
"related"
],
"url": "https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-833p-95jq-929q"
},
{
"tags": [
"related"
],
"url": "https://cna.erlef.org/cves/CVE-2026-8469.html"
},
{
"tags": [
"related"
],
"url": "https://osv.dev/vulnerability/EEF-CVE-2026-8469"
},
{
"tags": [
"patch"
],
"url": "https://github.com/phenixdigital/phoenix_storybook/commit/96d524690af0fe197a49f60d18e564a620b9ef81"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook",
"x_generator": {
"engine": "cvelib 1.8.0"
}
},
"adp": [
{
"references": [
{
"url": "https://github.com/phenixdigital/phoenix_storybook/security/advisories/GHSA-833p-95jq-929q",
"tags": [
"exploit"
]
}
],
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-05-21T13:55:42.783019Z",
"id": "CVE-2026-8469",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-05-21T13:56:33.631Z"
}
}
]
}
}
View Git Blame Copy Permalink