tocsin

Debian/python2.7: medium 6.1

An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the firs

Action: Upgrade python2.7 to 2.7.16-3 or later.

Affected

introducedfixedlast affected
02.7.16-3-

Fixed versions

2.7.16-3

Sources

published · modified · JSON