Vulnerability CVE-2024-1892
Published: 2024-02-28

Description:
Parts of the Scrapy API were found to be vulnerable to a ReDoS attack. Handling a malicious response could cause extreme CPU and memory usage during the parsing of its content, due to the use of vulnerable regular expressions for that parsing.

Type:

CWE-1333

 References:
https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b
https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5
Copyright 2024, cxsecurity.com

 

Back to Top