CWE-1333 - Inefficient Regular Expression Complexity
CWE-1333 High
- Abstraction:
- Base
- Structure:
- Simple
- Status:
- Draft
- Weakness Name
Inefficient Regular Expression Complexity
- Description
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
Attackers can create crafted inputs that intentionally cause the regular expression to use excessive backtracking in a way that causes the CPU consumption to spike.
- Common Consequences
Scope: Availability
Impact: DoS: Resource Consumption (CPU)
- Related Weaknesses
- Release Date:
- 2021-03-15
- Latest Modification Date:
- 2023-06-29
Free security scan for your website