PatchFirst · Vulnérabilités récentes
Vulnérabilités publiées pour configobj au cours des 30 derniers jours : 1. Présentes dans le catalogue KEV : 0.
Vulnérabilités : 2
A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation leads to inefficient regular expression complexity. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.