[Python] CWE-400: Regular Expression Injection

[jorgectf]

Query

Relevant PR: github/codeql#5442

Report

Constructing regular expressions directly from tainted data enables attackers to craft regular expressions in order to cause a Denial of Service or change the behaviour of the application depending on the matched string.

This query identifies cases in which a regular expression is used without being escaped before by re.escape (see python re documentation).

• Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing

Result(s)

• PRs providing fix:
• • Fix Regular Expression injection cve-search/cve-search#629 (CVE-2021-45470)
• • Fix Regular Expression injection kevoreilly/CAPEv2#473
• • Fix Regular Expression injection cuckoosandbox/cuckoo#3188
• • Fix Regular Expression injection tubone24/ebook_homebrew#289
• • Fix Regular Expression injection ctxis/CAPE#480

[ghsecuritylab]

Your submission is now in status SecLab review.

For information, the evaluation workflow is the following:
CodeQL initial assessment > SecLab review > CodeQL review > SecLab finalize > Pay > Closed

[jorgectf]

Polished a bit the description after the detail change related to Regular Expression Injection.

[agustingianni]

Hello Jorge, the security lab is evaluating your submission, we will ping you back soon. Thanks for the submission

[ghsecuritylab]

Your submission is now in status CodeQL review.

For information, the evaluation workflow is the following:
CodeQL initial assessment > SecLab review > CodeQL review > SecLab finalize > Pay > Closed

[ghsecuritylab]

Your submission is now in status SecLab finalize.

For information, the evaluation workflow is the following:
CodeQL initial assessment > SecLab review > CodeQL review > SecLab finalize > Pay > Closed

[xcorail]

Created Hackerone report 1196124 for bounty 303883 : [318] [Python] CWE-400: Regular Expression Injection

[ghsecuritylab]

Your submission is now in status Closed.

For information, the evaluation workflow is the following:
CodeQL initial assessment > SecLab review > CodeQL review > SecLab finalize > Pay > Closed