Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:** This is only exploitable in the case of a developer, putting the offending value in a server side configuration file.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Vulnerability Type
CWE-1333
Vulnerability Title
configobj 安全漏洞
Vulnerability Description
configobj是Differently Sized Kittens开源的一个简单但功能强大的配置文件读取器和写入器。 configobj存在安全漏洞，该漏洞源于容易受到正则表达式拒绝服务 (ReDoS) 的攻击。
CVSS Information
N/A
Vulnerability Type
N/A