Логотип exploitDog
bind:"GHSA-wj55-vqcq-gxcp" OR bind:"CVE-2021-3733"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-wj55-vqcq-gxcp" OR bind:"CVE-2021-3733"

Количество 25

Количество 25

github логотип

GHSA-wj55-vqcq-gxcp

больше 3 лет назад

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2021-3733

больше 3 лет назад

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2021-3733

почти 4 года назад

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2021-3733

больше 3 лет назад

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
EPSS: Низкий
msrc логотип

CVE-2021-3733

около 3 лет назад

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2021-3733

больше 3 лет назад

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker ...

CVSS3: 6.5
EPSS: Низкий
oracle-oval логотип

ELSA-2021-4057

больше 3 лет назад

ELSA-2021-4057: python3 security update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2022-05838

больше 4 лет назад

Уязвимость класса AbstractBasicAuthHandler компонента urllib.request интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:3489-1

больше 3 лет назад

Security update for python

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:1418-1

больше 3 лет назад

Security update for python

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3524-1

больше 3 лет назад

Security update for python

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3489-1

больше 3 лет назад

Security update for python

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3477-1

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

openSUSE-SU-2021:4104-1

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:1485-1

около 3 лет назад

Security update for python39

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:4104-1

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:4015-2

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:4015-1

больше 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2021:3486-1

больше 3 лет назад

Security update for python36

EPSS: Низкий
rocky логотип

RLSA-2022:1764

около 3 лет назад

Moderate: python38:3.8 and python38-devel:3.8 security update

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-wj55-vqcq-gxcp

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
redhat логотип
CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
0%
Низкий
почти 4 года назад
nvd логотип
CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server that an HTTP client (such as web browser) connects to, could trigger a Regular Expression Denial of Service (ReDOS) during an authentication request with a specially crafted payload that is sent by the server to the client. The greatest threat that this flaw poses is to application availability.

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
msrc логотип
CVSS3: 6.5
0%
Низкий
около 3 лет назад
debian логотип
CVE-2021-3733

There's a flaw in urllib's AbstractBasicAuthHandler class. An attacker ...

CVSS3: 6.5
0%
Низкий
больше 3 лет назад
oracle-oval логотип
ELSA-2021-4057

ELSA-2021-4057: python3 security update (MODERATE)

больше 3 лет назад
fstec логотип
BDU:2022-05838

Уязвимость класса AbstractBasicAuthHandler компонента urllib.request интерпретатора языка программирования Python, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
0%
Низкий
больше 4 лет назад
suse-cvrf логотип
openSUSE-SU-2021:3489-1

Security update for python

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:1418-1

Security update for python

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3524-1

Security update for python

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3489-1

Security update for python

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3477-1

Security update for python3

больше 3 лет назад
suse-cvrf логотип
openSUSE-SU-2021:4104-1

Security update for python3

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:1485-1

Security update for python39

около 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:4104-1

Security update for python3

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:4015-2

Security update for python3

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:4015-1

Security update for python3

больше 3 лет назад
suse-cvrf логотип
SUSE-SU-2021:3486-1

Security update for python36

больше 3 лет назад
rocky логотип
RLSA-2022:1764

Moderate: python38:3.8 and python38-devel:3.8 security update

около 3 лет назад

Уязвимостей на страницу