Lucene search

K
cvelistMitreCVELIST:CVE-2023-33290
HistoryJun 12, 2023 - 12:00 a.m.

CVE-2023-33290

2023-06-1200:00:00
mitre
www.cve.org
1
cve-2023-33290
rust
regular expression denial of service
crafted url
normalize_url
lib.rs
python

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.8%

The git-url-parse crate through 0.4.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to normalize_url in lib.rs, a similar issue to CVE-2023-32758 (Python).

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.8%

Related for CVELIST:CVE-2023-33290