Most recent entries from all

BREW-mongo-orchestration-CVE-2016-9964 — bottle.py vulnerable to CRLF Injection

Affected: Homebrew: mongo-orchestration

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

CVE-2016-9964

redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.

GHSA-j6f7-hghw-g437 — bottle.py vulnerable to CRLF Injection

Affected: PyPI: bottle