Debian/python2.7: medium 5.3
http.cookiejar.DefaultPolicy.domain_return_ok in Lib/http/cookiejar.py in Python before 3.7.3 does not correctly validate the domain: it can be tricked into sending existing cookies to the wrong serve
Action: Upgrade python2.7 to 2.7.16-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.16-3 | - |
Fixed versions
| 2.7.16-3 |
Sources
published · modified · JSON