Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-67725

Tornado is a Python web framework and asynchronous networking library. In versions 6.5.2 and below, a single maliciously crafted HTTP request can block the server's event loop for an extended period, caused by the HTTPHeaders.add method. The function accumulates values using string concatenation when the same header name is repeated, causing a Denial of Service (DoS). Due to Python string immutability, each concatenation copies the entire string, resulting in O(n²) time complexity. The severity
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:548b8604892606e0a96818d74cb3d86f1bda9e59555390a9fb14c3dc856cec6c
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"product":"tornado","vendor":"tornadoweb","versions":[{"status":"affected","version":"< 6.5.3"}]}
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-400","description":"CWE-400: Uncontrolled Resource Consumption","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/problemTypes/0/descriptions/0

Source references

3 source assertions
{"name":"https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd","tags":["x_refsource_MISC"],"url":"https://github.com/tornadoweb/tornado/commit/771472cfdaeebc0d89a9cc46e249f8891a6b29cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/references/1
{"name":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3","tags":["x_refsource_MISC"],"url":"https://github.com/tornadoweb/tornado/releases/tag/v6.5.3"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/references/2
{"name":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64","tags":["x_refsource_CONFIRM"],"url":"https://github.com/tornadoweb/tornado/security/advisories/GHSA-c98p-7wgm-6p64"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9d012c714941d42fc0a7341ea9d27576e10e76fe982c6a6510d12d66dbd2b2e3 · sha256:68835128cb840b36… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer