Description
Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks against a client because of urllib.request.AbstractBasicAuthHandler catastrophic backtracking.
Remediation
References
Related Vulnerabilities
Mailman Other Vulnerability (CVE-2006-2191)
OpenSSL CVE-2014-3511 Vulnerability (CVE-2014-3511)
WordPress Plugin WP Content Copy Protection & No Right Click Cross-Site Request Forgery (3.1.5)
Contao Incorrect Default Permissions Vulnerability (CVE-2019-19712)
WordPress Plugin Quotes Collection Cross-Site Request Forgery (1.5.5.1)