CVE-2024-52804

CVE-2024-52804 is a denial-of-service vulnerability affecting Tornado versions prior to 6.4.2, a Python web framework. Maliciously crafted HTTP cookie headers can exploit a quadratic complexity issue in the cookie parsing algorithm, leading to excessive CPU consumption and blocking other requests. This vulnerability has a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity to achieve high availability impact. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.