python-bottle: CRLF attacks
| Package(s): | python-bottle | CVE #(s): | CVE-2016-9964 | ||||||||||||||||||||
| Created: | December 21, 2016 | Updated: | January 30, 2017 | ||||||||||||||||||||
| Description: | From the Debian advisory:
It was discovered that bottle, a WSGI-framework for the Python programming language, did not properly filter "\r\n" sequences when handling redirections. This allowed an attacker to perform CRLF attacks such as HTTP header injection. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||