Логотип exploitDog
product: "python"
Консоль
Логотип exploitDog

exploitDog

product: "python"
Python

Pythonвысокоуровневый язык программирования общего назначения. Его философия дизайна делает акцент на читаемости кода.

Релизный цикл, информация об уязвимостях

Продукт: Python
Вендор: python

График релизов

3.93.103.113.123.1320202021202220232024202520262027202820292030

Недавние уязвимости Python

Количество 879

ubuntu логотип

CVE-2021-4189

почти 3 года назад

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-h7f6-hc46-frrv

почти 3 года назад

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure.

CVSS3: 7.4
EPSS: Низкий
nvd логотип

CVE-2021-28861

почти 3 года назад

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2021-28861

почти 3 года назад

Python 3.x through 3.10 has an open redirection vulnerability in lib/h ...

CVSS3: 7.4
EPSS: Низкий
ubuntu логотип

CVE-2021-28861

почти 3 года назад

** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2021-28861

почти 3 года назад

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2357-1

около 3 лет назад

Security update for python3

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2344-1

около 3 лет назад

Security update for python

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2291-1

около 3 лет назад

Security update for python310

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2249-1

около 3 лет назад

Security update for python

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
ubuntu логотип
CVE-2021-4189

A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecting back to a given IP address and port. This vulnerability could lead to FTP client scanning ports, which otherwise would not have been possible.

CVSS3: 5.3
0%
Низкий
почти 3 года назад
github логотип
GHSA-h7f6-hc46-frrv

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure.

CVSS3: 7.4
0%
Низкий
почти 3 года назад
nvd логотип
CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
0%
Низкий
почти 3 года назад
debian логотип
CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/h ...

CVSS3: 7.4
0%
Низкий
почти 3 года назад
ubuntu логотип
CVE-2021-28861

** DISPUTED ** Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
0%
Низкий
почти 3 года назад
redhat логотип
CVE-2021-28861

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

CVSS3: 7.4
0%
Низкий
почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2357-1

Security update for python3

1%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2344-1

Security update for python

1%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2291-1

Security update for python310

1%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2249-1

Security update for python

1%
Низкий
около 3 лет назад

Уязвимостей на страницу


Поделиться