Warning: Our website does not support Internet Explorer, please use Edge instead.
CWE-185: Incorrect Regular Expression
"The product specifies a regular expression in a way that causes data to be improperly matched or compared." - Entry from the Common Weakness Enumeration
A vulnerability existed in two methods when passed a certain argument. Passing
this argument lead to backtracking in a regular expression which resulted in
extremly slow evaluation times. This method could be called repeatedly and
overflow the system.
...
By having a loosley-defined regular expression backtracking became prevelant
when truncating HTML text. Updating the regular expression fixed the vulnerability.
A vulnerability in Django was found that could allow an unauthenticated,
remote attacker to cause a denial of service condition on a targeted system.
The vulnerability can be found in the django.utils.html.urlize() function and is due to
insufficient validation of user provided...