There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6923US | — | — | ||
There is a MEDIUM severity vulnerability affecting CPython.
The
email module didn’t properly quote newlines for email headers when
serializing an email message allowing for head… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147FIX
- https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384FIX
- https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7FIX
- https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0FIX
- https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1FIX
- https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6FIX
- https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533FIX
- https://github.com/python/cpython/issues/121650REPORT
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan