CVE-2024-1892 - OpenCVE

A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker can cause a denial-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potentially rendering services that utilize Scrapy for XML processing unresponsive.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5
https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b

History

No history.

MITRE

Status: PUBLISHED

Assigner: @huntr_ai

Published: 2024-02-28T00:00:14.092Z

Updated: 2024-08-11T14:28:49.917Z

Reserved: 2024-02-26T15:14:37.251Z

Link: CVE-2024-1892

Vulnrichment

Updated: 2024-08-01T18:56:22.557Z

NVD

Status : Awaiting Analysis

Published: 2024-02-28T00:15:53.897

Modified: 2024-04-16T12:15:10.050

Link: CVE-2024-1892

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-1892", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "state": "PUBLISHED", "assignerShortName": "@huntr_ai", "dateReserved": "2024-02-26T15:14:37.251Z", "datePublished": "2024-02-28T00:00:14.092Z", "dateUpdated": "2024-08-11T14:28:49.917Z"}, "containers": {"cna": {"title": "ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider", "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-04-16T11:10:41.338Z"}, "descriptions": [{"lang": "en", "value": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker can cause a denial-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potentially rendering services that utilize Scrapy for XML processing unresponsive."}], "affected": [{"vendor": "scrapy", "product": "scrapy/scrapy", "versions": [{"version": "unspecified", "lessThan": "2.11", "status": "affected", "versionType": "custom"}]}], "references": [{"url": "https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b"}, {"url": "https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5"}], "metrics": [{"cvssV3_0": {"version": "3.0", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-1333 Inefficient Regular Expression Complexity", "cweId": "CWE-1333"}]}], "source": {"advisory": "271f94f2-1e05-4616-ac43-41752389e26b", "discovery": "EXTERNAL"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:56:22.557Z"}, "title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b", "tags": ["x_transferred"]}, {"url": "https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "scrapy", "product": "scrapy", "cpes": ["cpe:2.3:a:scrapy:scrapy:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "2.11", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-03-05T16:44:39.898769Z", "id": "CVE-2024-1892", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-11T14:28:49.917Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b", "tags": ["x_transferred"]}, {"url": "https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T18:56:22.557Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-1892", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-03-05T16:44:39.898769Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:scrapy:scrapy:*:*:*:*:*:*:*:*"], "vendor": "scrapy", "product": "scrapy", "versions": [{"status": "affected", "version": "0", "lessThan": "2.11", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-11T14:28:46.610Z"}}], "cna": {"title": "ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider", "source": {"advisory": "271f94f2-1e05-4616-ac43-41752389e26b", "discovery": "EXTERNAL"}, "metrics": [{"cvssV3_0": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "scrapy", "product": "scrapy/scrapy", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "2.11", "versionType": "custom"}]}], "references": [{"url": "https://huntr.com/bounties/271f94f2-1e05-4616-ac43-41752389e26b"}, {"url": "https://github.com/scrapy/scrapy/commit/479619b340f197a8f24c5db45bc068fb8755f2c5"}], "descriptions": [{"lang": "en", "value": "A Regular Expression Denial of Service (ReDoS) vulnerability exists in the XMLFeedSpider class of the scrapy/scrapy project, specifically in the parsing of XML content. By crafting malicious XML content that exploits inefficient regular expression complexity used in the parsing process, an attacker can cause a denial-of-service (DoS) condition. This vulnerability allows for the system to hang and consume significant resources, potentially rendering services that utilize Scrapy for XML processing unresponsive."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1333", "description": "CWE-1333 Inefficient Regular Expression Complexity"}]}], "providerMetadata": {"orgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "shortName": "@huntr_ai", "dateUpdated": "2024-04-16T11:10:41.338Z"}}}, "cveMetadata": {"cveId": "CVE-2024-1892", "state": "PUBLISHED", "dateUpdated": "2024-08-11T14:28:49.917Z", "dateReserved": "2024-02-26T15:14:37.251Z", "assignerOrgId": "c09c270a-b464-47c1-9133-acb35b22c19a", "datePublished": "2024-02-28T00:00:14.092Z", "assignerShortName": "@huntr_ai"}, "dataVersion": "5.1"}