Vulnerability PYSEC-2021-327
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
5 years ago
September 20, 2021 at 10:15 PM UTC
No summary available
0.0.1 - 0.9.4
0.0.1 - 0.9.4
Details
Apprise is an open source library which allows you to send a notification to almost all of the most popular notification services available. In affected versions users who use Apprise granting them access to the IFTTT plugin (which just comes out of the box) are subject to a denial of service attack on an inefficient regular expression. The vulnerable regular expression is here. The problem has been patched in release version 0.9.5.1. Users who are unable to upgrade are advised to remove apprise/plugins/NotifyIFTTT.py to eliminate the service.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Low Risk
8 hours ago
Apprise forwards configured auth headers across cross-origin HTTP redirects
0.0.1 - 1.10.0 GHSA-856c-92hv-3vxx
0.0.1 - 1.10.0 GHSA-856c-92hv-3vxx
High Risk
5 years ago
Apprise vulnerable to regex injection with IFTTT Plugin
0.0.1 - 0.9.4 GHSA-qhmp-h54x-38qr
0.0.1 - 0.9.4 GHSA-qhmp-h54x-38qr
Impacted packages
Timeline
Published
5 years ago
September 20, 2021 at 10:15 PM UTC
Fixed (0.9.5.1)
5 years ago
September 18, 2021 at 08:03 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:06 AM UTC