Lucene search

K
cvelistMitreCVELIST:CVE-2016-9964
HistoryDec 16, 2016 - 9:02 a.m.

CVE-2016-9964

2016-12-1609:02:00
mitre
www.cve.org

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%

redirect() in bottle.py in bottle 0.12.10 doesnโ€™t filter a โ€œ\r\nโ€ sequence, which leads to a CRLF attack, as demonstrated by a redirect(โ€œ233\r\nSet-Cookie: name=saltโ€) call.

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.8%