BIT-python-min-2020-8492

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/python-min/BIT-python-min-2020-8492.json

JSON Data

https://api.test.osv.dev/v1/vulns/BIT-python-min-2020-8492

Aliases

Published

2025-01-16T07:23:43.889Z

Modified

2025-01-17T15:26:01.971Z

Summary

[none]

Details

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

Database specific

{
    "cpes": [
        "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
}

References

Affected packages

Bitnami / python-min

Package

Name: python-min
Purl: pkg:bitnami/python-min

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

2.7.0

Last affected

2.7.17

Introduced

3.5.0

Last affected

3.5.9

Introduced

3.6.0

Last affected

3.6.10

Introduced

3.7.0

Last affected

3.7.6

Introduced

3.8.0

Last affected

3.8.1