CVE-2025-1795
lowPriorität · verfolgen · 0EPSS 0.006 · 49. PerzentilDEEURUUSEPSS · bewertet 2026-10-22
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (29)
Betroffene Produkte und Versionsbereiche.
Advisories (7)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2025-0471Python: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2025-03-02csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Python ausnutzen, um Informationen offenzulegen.
- WID-SEC-W-2025-1439Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2025-06-30csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
- WID-SEC-W-2025-1850Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffDeutsch2025-08-14csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
- BIT-libpython-2025-1795Mishandling of comma during folding and unicode-encoding of email headers2025-08-11vendor · osvUS
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
- BIT-python-2025-1795Mishandling of comma during folding and unicode-encoding of email headers2025-04-14vendor · osvUS
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
- BIT-python-min-2025-1795Mishandling of comma during folding and unicode-encoding of email headers2025-04-14vendor · osvUS
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
- PSF-2025-32025-02-28vendor · osvUS
During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
auch bekannt als (8)
Weitere Namen und Kennungen dieser Entität.
- CNNVD-202502-3767cnnvd
- EUVD-2025-5930enisa_euvd
- BDU:2025-11593fstec_bdu
- GHSA-c266-vjjr-2v8jenisa_euvd
- BIT-libpython-2025-1795osv
- BIT-python-2025-1795osv
- BIT-python-min-2025-1795osv
- PSF-2025-3osv
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (27)
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48cnnvd
- https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593cnnvd
- https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74cnnvd
- https://github.com/python/cpython/issues/100884cnnvd
- https://github.com/python/cpython/pull/100885cnnvd
- https://github.com/python/cpython/pull/119099cnnvd
- https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/cnnvd
- https://vigilance.fr/vulnerability/Python-Core-spoofing-via-Email-Headers-Comma-46488cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan