CVE-2024-7592
HIGHCPython - Info Disclosure
Title source: llmDescription
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
Scores
CVSS v3
7.5
EPSS
0.0080
EPSS Percentile
73.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-1333
CWE-400
Status
published
Affected Products (13)
python/python
< 3.8.20
python/python
python/python
python/python
python/python
python/python
python/python
python/python
python/python
python/python
python/python
python/python
python/python
Timeline
Published
Aug 19, 2024
Tracked Since
Feb 18, 2026