1 matches found
AZL-86913 CVE-2026-8328 affecting package python3 for versions less than 3.12.9-13
The ftpcp function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv was patched to replace server-supplied PASV host addresses with the actual peer address getpeername0, ftpcp still calls parse227 directly and passes the raw attacker-controllable IP address and port t...
5.9CVSS5.9AI score0.00457EPSS
SaveExploits0References1
20