CVE-2023-45813

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Torbot is an open source tor network intelligence tool. In affected versions the `torbot.modules.validators.validate_link function` uses the python-validators URL validation regex. This particular regular expression has an exponential complexity which allows an attacker to cause an application crash using a well-crafted argument. An attacker can use a well-crafted URL argument to exploit the vulnerability in the regular expression and cause a Denial of Service on the system. The validators file has been removed in version 4.0.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1333

Affected software

VendorProductVersions
DedSecInsideTorBot< 4.0.0

References

Timeline

Published
Oct 18, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-458145.3Bunkum is an open-source protocol-agnostic request server for custom game servers. First, a little bit of background. So, in the beginning, CVE-2023-458155.4ArchiveBox is an open source self-hosted web archiving system. Any users who are using the `wget` extractor and view the content it outputs.CVE-2023-458163.3Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the CVE-2023-458186.1TinyMCE is an open source rich text editor. A mutation cross-site scripting (mXSS) vulnerability was discovered in TinyMCE’s core undo and rCVE-2023-458196.1TinyMCE is an open source rich text editor. A cross-site scripting (XSS) vulnerability was discovered in TinyMCE’s Notification Manager API.CVE-2023-45828.8Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much prCVE-2023-458206.5Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has webCVE-2023-458216.3Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. DuriCVE-2023-458225.3Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. DuriCVE-2023-458237.5Artifact Hub is a web-based application that enables finding, installing, and publishing packages and configurations for CNCF projects. DuriCVE-2023-458244.3OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pagCVE-2023-458255.5ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object