{ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2023-27043", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "refsource": "MISC", "name": "https://github.com/python/cpython/issues/102988", "url": "https://github.com/python/cpython/issues/102988" }, { "refsource": "MISC", "name": "http://python.org", "url": "http://python.org" }, { "refsource": "CONFIRM", "name": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html", "url": "https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html" }, { "refsource": "CONFIRM", "name": "https://github.com/python/cpython/issues/102988", "url": "https://github.com/python/cpython/issues/102988" }, { "refsource": "CONFIRM", "name": "https://security.netapp.com/advisory/ntap-20230601-0003/", "url": "https://security.netapp.com/advisory/ntap-20230601-0003/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-88fbb78cd3", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-555b4d49b1", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-2f86a608b2", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-1bb427c240", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-87771f4249", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-c61a7d5227", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-d577604e6a", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-7d223ee343", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-c0bf8c0c4e", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-f96ff39b59", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-8085628fff", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-d01f8a69b4", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-b245e992ea", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-0583eedde7", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/" }, { "refsource": "FEDORA", "name": "FEDORA-2024-06ff0a6def", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/" }, { "refsource": "FEDORA", "name": "FEDORA-2024-3ab90a5b01", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/" }, { "refsource": "FEDORA", "name": "FEDORA-2023-0583eedde7", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/" }, { "refsource": "FEDORA", "name": "FEDORA-2024-8df4ac93d7", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/" }, { "refsource": "FEDORA", "name": "FEDORA-2024-94e0390e4e", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/" } ] } }