tocsin

Alpine/python2: medium 6.1

An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the firs

Action: Upgrade python2 to 2.7.18-r0 or later.

Affected

introducedfixedlast affected
02.7.18-r0-

Fixed versions

2.7.18-r0

Sources

published · modified · JSON