GoogleOSV:GHSA-MR82-8J83-VXMVPydantic regular expression denial of service
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
References
github.com/pydantic/pydantic
github.com/pydantic/pydantic/commit/59d8f38fd6220e3917c53785dbc70317d6f8e631
github.com/pydantic/pydantic/commit/e4393ae6145c4dadff739990bb0116c6dec3441b
github.com/pydantic/pydantic/pull/7360
lists.fedoraproject.org/archives/list/[email protected]/message/6JBZLMSH4GAZOVBMT2JUO2LXHY7M2ALI
nvd.nist.gov/vuln/detail/CVE-2024-3772
Related
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%