CWE-1333
Overview
- CWE ID
- 1333
- CWE Name
- Inefficient Regular Expression Complexity
- CWE Abstraction
- Base
- CWE structure
- Simple
- CWE Status
- Draft
Description
The product uses a regular expression with an inefficient, possibly exponential worst-case computational complexity that consumes excessive CPU cycles.
Extended Description
Some regular expression engines have a feature called "backtracking". If the token cannot match, the engine "backtracks" to a position that may result in a different token that can match.
Backtracking becomes a weakness if all of these con