Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-42969

Опубликовано: 16 окт. 2022
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:pytest:py:*:*:*:*:*:*:*:*
Версия до 1.11.0 (включая)

EPSS

Процентиль: 31%
0.00115
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-1333
CWE-1333

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 3.1
redhat
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 5.3
msrc
4 месяца назад

The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.

CVSS3: 5.3
debian
больше 3 лет назад

The py library through 1.11.0 for Python allows remote attackers to co ...

suse-cvrf
почти 3 года назад

Security update for python-py

EPSS

Процентиль: 31%
0.00115
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-1333
CWE-1333