CVE-2023-33289

7.5HIGH

The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of U

发布于: 6/21/2023更新于: 3/8/2025
在NVD查看在MITRE查看

描述

The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service (ReDos) via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."

AI分析AI驱动

受影响产品

urlnorm_projecturlnorm

参考资料