Code injection

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

CVE-2017-18361

CVE-2017-18361 affects Pylons Colander up to version 1.6, where the URL validator can enter an infinite loop due to an unclosed parenthesis, causing a denial of service. The connected documents do not provide a remediation/patch version; monitor for updates from project maintainers.

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

CVE-2017-18361

Removed by vendor...

CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

CVE-2017-18361: Loop with Unreachable Exit Condition

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis...

GHSA-X5X7-3V85-WPC4 Apache Struts allows entering a custom URL in a form field if built-in URLValidator is used

In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. NOTE: this...

CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

UBUNTU-CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

CVE-2018-10101

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

CVE-2018-10101

CVE-2018-10101 affects WordPress up to version 4.9.4 where the URL validator incorrectly treated localhost hostnames as being on the same host as the WordPress server. This misclassification could enable a vulnerability scenario described across connected docs. Upgrading to WordPress 4.9.5 or lat...

PT-2018-9682

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 4.9.5 debian linux affected versions not specified Description: The issue is related to the URL validator in WordPress, which incorrectly assumed that URLs with the hostname localhost were on the same host as the...

CVE-2018-10101: URL Redirection to Untrusted Site

Before WordPress 4.9.5, the URL validator assumed URLs with the hostname localhost were on the same host as the WordPress server...

Apache Struts 2.5.x < 2.5.12 Multiple DoS (S2-047) (S2-049)

The version of Apache Struts running on the remote host is 2.5.x prior to 2.5.12. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists when handling a specially crafted URL in a form field when the built-in URL validator is used. An unauthenticated,...

Apache Struts vulnerable to denial-of-service (DoS)

Overview Apache Struts provided by the Apache Software Foundation is a software framework for creating web applications in Java. Web applications that are developed using Apache Struts 2 contain a denial-of-service DoS vulnerability due to an issue in URLValidator. ASAI Ken reported this...

PYSEC-2015-21

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors...

PT-2015-6780

Name of the Vulnerable Software and Affected Versions Django versions 1.8.0 through 1.8.2 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, via unspecified vectors. This is related to the validators.URLValidator in Django. Recommendations Fo...