CVE-2017-18361

In Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of service via an unclosed parenthesis.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-02-01

Last modified

2024-08-05

Weaknesses

CWE-835

Affected products

• Colander (Pylonsproject)

References

• https://github.com/Pylons/colander/issues/290
• https://github.com/Pylons/colander/pull/323