Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2022-42969

Published: 16/10/2022 Updated: 28/02/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Py

Vulnerability Summary

The py library up to and including 1.11.0 for Python allows remote malicious users to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

pytest py

Github Repositories

https://github.com/opeco17/poetry-audit-plugin

Poetry plugin for checking vulnerabilities in dependencies 🚀

Poetry Audit Plugin Poetry plugin for checking security vulnerabilities in dependencies based on safety $ poetry audit Scanning 19 packages • ansible-runner installed 112 affected <131 CVE PVE-2021-36995 • ansible-tower-cli installed 318 affected <320 CVE CVE-2020-1733 • jinja2 installed 20 affected &am

References

CWE-1333https://pypi.org/project/pyhttps://github.com/pytest-dev/py/blob/cb87a83960523a2367d0f19226a73aed4ce4291d/py/_path/svnurl.py#L316https://github.com/pytest-dev/py/issues/287https://news.ycombinator.com/item?id=34163710https://nvd.nist.govhttps://github.com/opeco17/poetry-audit-plugin
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-34377CVE-2024-20859CVE-2023-49606injectarbitrary CVE-2024-33788CVE-2024-30973IDORCVE-2024-33907
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook