VULNERABILITY INTELLIGENCE

CVE-2017-16116

CVSS score7.5 HIGH
EPSS probability1.63%
CISA KEVNot currently listed
Published2018-06-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods.

Weakness classification

  • CWE-400: Uncontrolled Resource Consumption

Primary references