An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
References
Link | Resource |
---|---|
https://research.jfrog.com/vulnerabilities/cleo-redos-xray-257186/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2022-11-09 12:15
Updated : 2022-11-10 06:28
NVD link : CVE-2022-42966
Mitre link : CVE-2022-42966
JSON object : View
CWE
Products Affected
python-poetry
- cleo