Email header injection due to unquoted newlines
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6923US | — | — | ||
There is a MEDIUM severity vulnerability affecting CPython.
The
email module didn’t properly quote newlines for email headers when
serializing an email message allowing for head… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://www.openwall.com/lists/oss-security/2024/08/01/3WEB
- http://www.openwall.com/lists/oss-security/2024/08/02/2WEB
- https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147WEB
- https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384WEB
- https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7WEB
- https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0WEB
- https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1WEB
- https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan