CVE-2024-7779 — ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer

CVE-2024-7779

ReDoS (Regular Expression Denial of Service) in danswer-ai/danswer PUBLISHED

Description (CNA)

A vulnerability in danswer-ai/danswer version 1 allows an attacker to perform a Regular Expression Denial of Service (ReDoS) by manipulating regular expressions. This can significantly slow down the application's response time and potentially render it completely unusable.

Affected (CNA)

Vendor / product	Versions
danswer-ai / danswer-ai/danswer	affected unspecified through latest

CWE

CWE-1333

References

https://huntr.com/bounties/829f7d9f-8755-4362-bd40-801e4690dcdc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.