Lucene search

K
osvGoogleOSV:GHSA-J6F7-HGHW-G437
HistoryMay 17, 2022 - 3:05 a.m.

bottle.py vulnerable to CRLF Injection

2022-05-1703:05:15
Google
osv.dev
5

0.002 Low

EPSS

Percentile

57.8%

bottle.py is a fast and simple micro-framework for python web-applications. redirect() in bottle.py in bottle 0.12.10 doesnโ€™t filter a โ€œ\r\nโ€ sequence, which leads to a CRLF attack, as demonstrated by a redirect(โ€œ233\r\nSet-Cookie: name=saltโ€) call.