VulnerableCode Vulnerability Details - VCID-s39v-m2x5-aaae

Search for vulnerabilities

Vulnerability details: VCID-s39v-m2x5-aaae

Essentials
Severities (0)
References (3)
Severity details (0)
Exploits (0)
EPSS
History (0)

Vulnerability ID	VCID-s39v-m2x5-aaae
Aliases	GMS-2012-3
Summary	When using digest authentication with a wrong password, `requests` will retry the request for infinity. This makes the package vulnerable to Denial of Service (DoS).
Status	Published
Exploitability	0.5
Weighted Severity	0.0
Risk	None
Affected and Fixed Packages	Package Details

Weaknesses (2)

CWE-1035	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-937	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

System	Score	Found at
There are no known severity scores.

Reference id	Reference type	URL
		https://github.com/requests/requests/issues/541
		https://github.com/requests/requests/pull/547
		https://github.com/requests/requests/pull/547/commits/c3e6c41fc164d4348f8ce197bd0075aff05637af

No exploits are available.

There are no known vectors.

No EPSS data available for this vulnerability.

Date	Actor	Action	Source	VulnerableCode Version
There are no relevant records.