Lucene search
PRIOn knowledge basePRION:CVE-2024-1892HistoryFeb 28, 2024 - 12:15 a.m.
Code injection
2024-02-2800:15:00
PRIOn knowledge base
www.prio-n.com
10
scrapy
api
vulnerability
redos attack
code injection
malicious response
cpu
memory
regular expressions
parsing
Parts of the Scrapy API were found to be vulnerable to a ReDoS attack. Handling a malicious response could cause extreme CPU and memory usage during the parsing of its content, due to the use of vulnerable regular expressions for that parsing.
Related
github
github
Scrapy vulnerable to ReDoS via XMLFeedSpider
2024-02-15 15:22:02
osv
osv
CVE-2024-1892
2024-02-28 00:15:53
Scrapy vulnerable to ReDoS via XMLFeedSpider
2024-02-15 15:22:02
cvelist
cvelist
CVE-2024-1892 ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider
2024-02-28 00:00:14
veracode
veracode
ReDoS (Regular Expression Denial Of Service)
2024-02-28 05:44:22
nvd
nvd
CVE-2024-1892
2024-02-28 00:15:53
debiancve
debiancve
CVE-2024-1892
2024-02-28 00:15:53
ubuntucve
ubuntucve
CVE-2024-1892
2024-02-28 00:00:00
cve
cve
CVE-2024-1892
2024-02-28 00:15:53