Skip to main content

Incorrect Regular Expression

CVE-2024-36751

Severity Medium
Score 6.9/10

Summary

An issue in parse-uri and parseuri allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.

  • LOW
  • NETWORK
  • NONE
  • NONE

CWE-185 - Incorrect Regular Expression

The software specifies a regular expression in a way that causes data to be improperly matched or compared.

Advisory Timeline

  • Published