Lucene search
+L

3 matches found

RedHat Linux
RedHat Linux
added 2021/11/09 5:54 p.m.13 views

python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters

The package python/cpython is vulnerable to Web Cache Poisoning via urllib.parse.parseqsl and urllib.parse.parseqs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon ;, they can cause a difference in the interpretation of the request...

5.9CVSS6.8AI score0.35717EPSS
SaveExploits1References5
Rows per page
Query Builder