Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Python Uncontrolled Resource Consumption Vulnerability - CVE-2021-3733 - Vulnerability Database
Python

Python Uncontrolled Resource Consumption Vulnerability - CVE-2021-3733

Medium
Reference: CVE-2021-3733
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-3733
Title: Python Uncontrolled Resource Consumption Vulnerability
Overview:

There39s a flaw in urllib39s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.