mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-08-04 08:44:25 +00:00
158 lines
6.4 KiB
JSON
158 lines
6.4 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2024-6923",
|
|
"ASSIGNER": "cna@python.org",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "There is a MEDIUM severity vulnerability affecting CPython.\n\nThe \nemail module didn\u2019t properly quote newlines for email headers when \nserializing an email message allowing for header injection when an email\n is serialized."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "Python Software Foundation",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "CPython",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "0",
|
|
"version_value": "3.8.20"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "3.9.0",
|
|
"version_value": "3.9.20"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "3.10.0",
|
|
"version_value": "3.10.15"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "3.11.0",
|
|
"version_value": "3.11.10"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "3.12.0",
|
|
"version_value": "3.12.5"
|
|
},
|
|
{
|
|
"version_affected": "<",
|
|
"version_name": "3.13.0a1",
|
|
"version_value": "3.13.0rc2"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://github.com/python/cpython/pull/122233",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/pull/122233"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/issues/121650",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/issues/121650"
|
|
},
|
|
{
|
|
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/",
|
|
"refsource": "MISC",
|
|
"name": "https://mail.python.org/archives/list/security-announce@python.org/thread/QH3BUOE2DYQBWP7NAQ7UNHPPOELKISRW/"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa7"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d0"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c50147"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f1"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e6"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/f7c0f09e69e950cf3c5ada9dbde93898eb975533"
|
|
},
|
|
{
|
|
"url": "https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc2384"
|
|
}
|
|
]
|
|
},
|
|
"generator": {
|
|
"engine": "Vulnogram 0.2.0"
|
|
},
|
|
"source": {
|
|
"discovery": "UNKNOWN"
|
|
},
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Petr Viktorin"
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"value": "Seth Larson"
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"value": "John Whitlock"
|
|
},
|
|
{
|
|
"lang": "en",
|
|
"value": "Bas Bloemsaat"
|
|
}
|
|
]
|
|
} |