Back to search
CVE-2024-7592
Published: Aug 19, 2024
Modified: Nov 3, 2025
PUBLISHED
Description
There is a LOW severity vulnerability affecting CPython, specifically the 'http.cookies' standard library module. When parsing cookies that contained backslashes for quoted characters in the cookie value, the parser would use an algorithm with quadratic complexity, resulting in excess CPU resources being used while parsing the value.
| Vendor | Product | Versions |
|---|---|---|
Python Software Foundation | CPython | affected 0 - < 3.8.20affected 3.9.0 - < 3.9.20affected 3.10.0 - < 3.10.15affected 3.11.0 - < 3.11.10affected 3.12.0 - < 3.12.6+1 more versions |
Weaknesses (CWE)
References
https://github.com/python/cpython/issues/123067
issue-tracking
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now