Incorrect Regular Expression
CVE-2024-36751
Summary
An issue in parse-uri and parseuri allows attackers to cause a Regular expression Denial of Service (ReDoS) via a crafted URL.
- LOW
- NETWORK
- NONE
- NONE
CWE-185 - Incorrect Regular Expression
The software specifies a regular expression in a way that causes data to be improperly matched or compared.
References
Advisory Timeline
- Published