CVE-2022-42966
- Reference to the description:
- Description:
- An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
- Last updated date:
- 07/06/2023
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 11/10/2022
- Reference url to background
https://research.jfrog.com/vulnerabilities/cleo-redos-xray-257186/