Most recent entries from all

BREW-mongo-orchestration-CVE-2016-9964 — bottle.py vulnerable to CRLF Injection

Affected: Homebrew: mongo-orchestration

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

cnvd-2016-13023

EUVD-2026-88163

fkie_cve-2016-9964

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

GHSA-j6f7-hghw-g437 — bottle.py vulnerable to CRLF Injection

Affected: PyPI: bottle

gsd-2016-9964

openSUSE-SU-2024:11220-1 — python-bottle-doc-0.12.19-1.8 on GA media

python-bottle-doc-0.12.19-1.8 on GA media

PYSEC-2016-24

Affected: PyPI: bottle

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

UBUNTU-CVE-2016-9964

Affected: Ubuntu:Pro:14.04:LTS: python-bottle, Ubuntu:16.04:LTS: python-bottle

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.