Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-28861HistoryAug 23, 2022 - 1:15 a.m.
CVE-2021-28861
2022-08-2301:15:07
Debian Security Bug Tracker
security-tracker.debian.org
22
python
open redirection
vulnerability
uri path
information disclosure
disputed
third party
security checks
unix
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
59.7%
Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states “Warning: http.server is not recommended for production. It only implements basic security checks.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 11 | all | pypy3 | <= 7.3.5+dfsg-2+deb11u2 | pypy3_7.3.5+dfsg-2+deb11u2_all.deb |
| Debian | 999 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 13 | all | pypy3 | < 7.3.10+dfsg-1 | pypy3_7.3.10+dfsg-1_all.deb |
| Debian | 11 | all | python2.7 | <= 2.7.18-8+deb11u1 | python2.7_2.7.18-8+deb11u1_all.deb |
| Debian | 12 | all | python3.11 | < 3.11.0~b4-1 | python3.11_3.11.0~b4-1_all.deb |
| Debian | 11 | all | python3.9 | <= 3.9.2-1 | python3.9_3.9.2-1_all.deb |
Related
nessus
nessus
Fedora 36 : pypy3.8 (2022-15f1aa7dc7)
2022-12-23 00:00:00
SUSE SLES12 Security Update : python (SUSE-SU-2022:3940-1)
2022-11-13 00:00:00
SUSE SLES15 Security Update : python3 (SUSE-SU-2022:3593-1)
2022-10-15 00:00:00
prion
prion
Open redirect
2022-08-23 01:15:00
openvas
openvas
Fedora: Security Advisory for pypy3.8 (FEDORA-2022-20116fb6aa)
2022-11-11 00:00:00
Fedora: Security Advisory for pypy3.9 (FEDORA-2022-4ac2e16969)
2022-10-23 00:00:00
Huawei EulerOS: Security Advisory for python3 (EulerOS-SA-2022-2693)
2022-11-03 00:00:00
osv
osv
python3.5 vulnerability
2022-09-22 18:52:20
http.server: Open Redirection if the URL path starts with //
2022-08-23 00:00:00
BIT-python-2021-28861
2024-03-06 11:06:51
cve
cve
CVE-2021-28861
2022-08-23 01:15:07
suse
suse
Security update for python (moderate)
2022-10-04 00:00:00
Security update for python3 (important)
2022-10-06 00:00:00
Security update for python310 (important)
2022-09-30 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: python3.6-3.6.15-5.fc35
2022-10-01 01:26:05
[SECURITY] Fedora 37 Update: pypy3.8-7.3.9-5.3.8.fc37
2022-11-10 22:44:34
[SECURITY] Fedora 35 Update: pypy3.7-7.3.9-4.3.7.fc35
2022-10-28 11:46:08
ibm
ibm
cbl_mariner
cbl_mariner
CVE-2021-28861 affecting package python3 for versions less than 3.9.19-1
2022-09-16 06:05:37
CVE-2021-28861 affecting package python3 3.7.13-2
2022-09-17 05:56:36
ubuntucve
ubuntucve
CVE-2021-28861
2022-08-23 00:00:00
ubuntu
ubuntu
Python vulnerability
2022-09-22 00:00:00
Python vulnerabilities
2023-02-27 00:00:00
cvelist
cvelist
CVE-2021-28861
2022-08-23 00:00:00
veracode
veracode
Information Disclosure
2022-10-10 23:00:45
redhatcve
redhatcve
CVE-2021-28861
2022-08-23 13:09:44
nvd
nvd
CVE-2021-28861
2022-08-23 01:15:07
almalinux
almalinux
Moderate: python3.9 security, bug fix, and enhancement update
2022-11-15 00:00:00
Moderate: python3 security update
2023-02-21 00:00:00
Moderate: python39:3.9 and python39-devel:3.9 security update
2023-05-16 00:00:00
oraclelinux
oraclelinux
python3.9 security, bug fix, and enhancement update
2022-11-22 00:00:00
python3 security update
2023-02-22 00:00:00
python38:3.8 and python38-devel:3.8 security update
2023-05-23 00:00:00
redhat
redhat
(RHSA-2022:6766) Moderate: rh-python38-python security update
2022-10-03 15:00:33
rocky
rocky
python3.9 security, bug fix, and enhancement update
2022-11-15 06:22:23
python3 security update
2023-02-22 01:08:44
photon
photon
Important Photon OS Security Update - PHSA-2022-0240
2022-09-05 00:00:00
Important Photon OS Security Update - PHSA-2022-0516
2022-09-15 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0240
2022-09-05 00:00:00
mageia
mageia
Updated python3 packages fix security vulnerability
2022-10-08 23:22:22
gentoo
gentoo
Python, PyPy3: Multiple Vulnerabilities
2023-05-03 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.002
Percentile
59.7%
Related for DEBIANCVE:CVE-2021-28861