ROS-20220407-03

A vulnerability in the Python client library is related to insufficient validation of user input data in the FTP (File Transfer Protocol) library when used in PASV (passive) mode
in the FTP (File Transfer Protocol) library when it is used in PASV (passive) mode. Exploitation
the vulnerability could allow a remote attacker to set up a malicious FTP server, trick the FTP client into PASV (passive mode).
a Python FTP client to connect to a given IP address and port, which could result in the FTP client scanning ports.
port scanning by the FTP client

Vulnerability in the urllib.parse module of Python, due to insufficient validation of the data provided by the attacker in the module.
data provided by the attacker in the urllib.parse module in Python. Exploitation of the vulnerability could allow
an attacker acting remotely to pass specially crafted data containing CR-LF characters to an application and alter the application’s behavior.
CR-LF characters, and change the behavior of the application