Vulnetix
Try Vulnetix Request Demo
BIT-python-min-2020-8492 PUBLISHED CVSS 6.5 MEDIUM

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

Risk Scores

CVSS v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Bitnamipython-min2.7.0, 3.5.0, 3.6.0

Timeline

References

Open in Interactive Console →