Lucene search

K
cvelistMitreCVELIST:CVE-2020-8492
HistoryJan 30, 2020 - 12:00 a.m.

CVE-2020-8492

2020-01-3000:00:00
mitre
www.cve.org
1

7.1 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.5%

Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.

References