CVE-2023-33289
7.5HIGHThe urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of U
게시됨: 6/21/2023업데이트됨: 3/8/2025
설명
The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."
AI 분석AI 기반
영향받는 제품
urlnorm_projecturlnorm
참조
- https://gist.github.com/6en6ar/b118888dc739e8979038f24c8ac33611ExploitThird Party Advisory
- https://github.com/progscrape/urlnormProduct
- https://lib.rs/crates/urlnormProduct
- https://news.ycombinator.com/item?id=40435263
- https://gist.github.com/6en6ar/b118888dc739e8979038f24c8ac33611ExploitThird Party Advisory
- https://github.com/progscrape/urlnormProduct
- https://lib.rs/crates/urlnormProduct