PYSEC-2020-149

🗓️ 06 Mar 2020 20:15:00Reported by GoogleType

osv🔗 osv.dev👁 2 Views

The encode_invalid_chars function in urllib3 may cause CPU usage due to duplicate percent encodings.

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Vulnerability in Python-urllib3 affects IBM Cloud Pak for Data System 2.0 (CPDS2.0)	11 Mar 202413:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	15 Apr 202503:04	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in urllib3 affects IBM Cloud Pak for Data System 1.0(CPDS 1.0)[CVE-2020-26137, CVE-2020-7212, CVE-2021-33503]	3 May 202507:17	–	ibm
BDU FSTEC	The vulnerability of the urllib3 module in the Python programming language, related to uncontrolled resource consumption, allows attackers to trigger a service failure.	18 Dec 202000:00	–	bdu_fstec
CNVD	urllib3 library denial of service vulnerability	10 Mar 202000:00	–	cnvd
CVE	CVE-2020-7212	6 Mar 202019:14	–	cve
Cvelist	CVE-2020-7212	6 Mar 202019:14	–	cvelist
Debian CVE	CVE-2020-7212	6 Mar 202019:14	–	debiancve
EUVD	EUVD-2020-0231	7 Oct 202500:30	–	euvd
Github Security Blog	Uncontrolled Resource Consumption in urllib3	30 Apr 202117:31	–	github

Source	Link
github	www.github.com/urllib3/urllib3/blob/master/CHANGES.rst
pypi	www.pypi.org/project/urllib3/1.25.8/
github	www.github.com/urllib3/urllib3/commit/a74c9cfbaed9f811e7563cfc3dce894928e0221a
github	www.github.com/advisories/GHSA-hmv2-79q8-fv6g

08 Nov 2023 04:03Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

CVSS 27.8

EPSS0.03288