CVE-2024-7592 Vulnerability Details

  /     /     /  

CVE-2024-7592 Metadata Quick Info

CVE Published: 19/08/2024 | CVE Updated: 18/10/2024 | CVE Year: 2024
Source: PSF | Vendor: Python Software Foundation | Product: CPython
Status : PUBLISHED

---

CVE-2024-7592 Description

There is a LOW severity vulnerability affecting CPython, specifically the \'http.cookies\' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-400
CWE Name: CWE-400 Uncontrolled Resource Consumption
Source: Python Software Foundation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description: