DEBIAN-CVE-2021-28861

🗓️ 23 Aug 2022 01:15:07Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Debian advisory for Python versions three dot x to three dot ten with open redirection in lib/http/server.py caused by leading slashes.

Reporter	Title	Published	Views	Family All 278
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	26 Apr 202319:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	12 Apr 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities have been fixed in IBM Security Verify Access	11 May 202316:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to phishing attacks in Python (CVE-2021-28861)	3 May 202314:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulnerabilities in Python	11 Jul 202313:33	–	ibm
Tenable Nessus	Amazon Linux 2 : python3 (ALAS-2022-1896)	7 Dec 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python38 (ALASPYTHON3.8-2024-016)	13 Nov 202400:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0053: python3 (ALINUX3-SA-2023:0053)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : python3.9 (ALSA-2022:8353)	18 Nov 202200:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-28861

01 Sep 2026 20:04Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.4

EPSS0.02535