Описание
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:materialsvirtuallab:pymatgen:-:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00213
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-1333
CWE-1333
Связанные уязвимости
CVSS3: 5.9
ubuntu
около 3 лет назад
An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.from_string method
CVSS3: 5.9
debian
около 3 лет назад
An exponential ReDoS (Regular Expression Denial of Service) can be tri ...
CVSS3: 5.9
github
около 3 лет назад
pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)
EPSS
Процентиль: 44%
0.00213
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-1333
CWE-1333