https://bugzilla.redhat.com/show_bug.cgi?id=2082387
--- Doc Text *updated* by TEJ RATHI <trathi(a)redhat.com> ---
Hawk has been found to have a ReDoS vulnerability in its header parsing functionality. The
issue arises from inadequate input validation in the Hawk.utils.parseHost() function when
processing untrusted input with regular expressions. An attacker, by sending a specially
crafted HTTP header, can exploit this vulnerability and initiate a regular expression
denial of service (ReDoS) attack.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2082387