Lucene search

Veracode Vulnerability DatabaseVERACODE:43798

HistoryOct 12, 2023 - 2:32 p.m.

Improper Input Validation

2023-10-1214:32:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

291

python

input validation

email address

vulnerability

domain name

software

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.002

Percentile

58.7%

JSON

python is vulnerable to improper input validation. The vulnerability arises due to incorrect parsing of an email address containing a special character. An attacker can bypass protection mechanisms in which application access is granted only after verifying its domain name.

Affected configurations

Vulners

Node

-python3\Matchedge3.8.8-r0

-python3\Matchedge3.9.5-r1

-python3\Matchedge3.10.2-r0

-python3\Matchedge3.11.1-r2

-python3\Matchedge3.8.2-r1

-python3\Matchedge3.11.1-r1

-python3\Matchedge3.8.2-r7

-python3\Matchedge3.10.5-r1

-python3\Matchedge3.10.4-r0

-python3\Matchedge3.12.3-r0

-python3\Matchedge3.10.8-r0

-python3\Matchedge3.11.5-r0

-python3\Matchedge3.11.3-r0

-python3\Matchedge3.10.5-r0

-python3\Matchedge3.11.4-r0

-python3\Matchedge3.12.5-r0

-python3\Matchedge3.9.7-r4

-python3\Matchedge3.10.6-r1

-python3\Matchedge3.8.2-r0

-python3\Matchedge3.11.3-r11

-python3\Matchedge3.9.6-r2

-python3\Matchedge3.10.8-r1

-python3\Matchedge3.10.3-r1

-python3\Matchedge3.10.8-r3

-python3\Matchedge3.8.7-r3

-python3\Matchedge3.11.1-r3

-python3\Matchedge3.9.5-r0

-python3\Matchedge3.10.7-r0

-python3\Matchedge3.11.2-r0

-python3\Matchedge3.8.3-r0

-python3\Matchedge3.10.2-r1

-python3\Matchedge3.8.2-r6

-python3\Matchedge3.11.6-r1

-python3\Matchedge3.9.6-r0

-python3\Matchedge3.8.2-r2

-python3\Matchedge3.11.3-r3

-python3\Matchedge3.10.6-r0

-python3\Matchedge3.12.4-r0

-python3\Matchedge3.9.7-r2

-python3\Matchedge3.11.3-r10

-python3\Matchedge3.11.4-r2

-python3\Matchedge3.12.5-r1

-python3\Matchedge3.11.4-r1

-python3\Matchedge3.9.4-r0

-python3\Matchedge3.10.5-r2

-python3\Matchedge3.10.1-r0

-python3\Matchedge3.9.7-r3

-python3\Matchedge3.11.0-r2

-python3\Matchedge3.11.4-r4

-python3\Matchedge3.12.3-r1

-python3\Matchedge3.11.8-r0

-python3\Match3.193.11.9-r1

-python3\Match3.193.11.9-r0

-python3\Match3.193.11.6-r1

-python3\Match3.193.11.8-r0

-python3\Match3.173.10.9-r1

-python3\Match3.173.10.14-r2

-python3\Match3.173.10.14-r1

-python3\Match3.173.10.10-r0

-python3\Match3.173.10.13-r0

-python3\Match3.173.10.11-r0

-python3\Match3.173.10.12-r0

-python3\Match3.173.10.8-r3

-python3\Match3.183.11.5-r0

-python3\Match3.183.11.3-r11

-python3\Match3.183.11.6-r0

-python3\Match3.183.11.4-r0

-python3\Match3.183.11.3-r10

-python3\Match3.183.11.8-r1

-python3\Match3.183.11.8-r0

-python3\Match3.203.12.3-r2

-python3\Match3.203.12.3-r1

pythonpythonRange≤3.11.6

-pythonx86Range≤3.12.0-a1

VendorProductVersionCPE
-python3\edgecpe:2.3:a:-:python3\:edge:3.8.8-r0:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.9.5-r1:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.10.2-r0:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.11.1-r2:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.8.2-r1:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.11.1-r1:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.8.2-r7:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.10.5-r1:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.10.4-r0:*:*:*:*:*:*:*
-python3\edgecpe:2.3:a:-:python3\:edge:3.12.3-r0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.8.8-r0:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.9.5-r1:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.10.2-r0:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.11.1-r2:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.8.2-r1:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.11.1-r1:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.8.2-r7:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.10.5-r1:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.10.4-r0:::::::*
-	python3\	edge	cpe:2.3:a:-:python3\:edge:3.12.3-r0:::::::*

Rows per page:

1-10 of 741

References

python.org

github.com/python/cpython/commit/30870c834ce0e47cc689b56aed7ac468f6e1c1ad#diff-3157f826e3eb7c130240837577bdc770f926762b7181ea6f72b40691918de8a1

github.com/python/cpython/issues/102988

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZAEFSFZDNBNJPNOUTLG5COISGQDLMGV/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75DTHSTNOFFNAWHXKMDXS7EJWC6W2FUC/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ARI7VDSNTQVXRQFM6IK5GSSLEIYV4VZH/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BQAKLUJMHFGVBRDPEY57BJGNCE5UUPHW/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HXYVPEZUA3465AEFX5JVFVP7KIFZMF3N/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6M5I6OQHJABNEYY555HUMMKX3Y4P25Z/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NEUNZSZ3CVSM2QWVYH3N2XGOCDWNYUA3/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORLXS5YTKN65E2Q2NWKXMFS5FWQHRNZW/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2MAICLFDDO3QVNHTZ2OCERZQ34R2PIC/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2W2BZQIHMCKRI5FNBJERFYMS5PK6TAH/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PHVGRKQAGANCSGFI3QMYOCIMS4IFOZA5/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PU6Y2S5CBN5BWCBDAJFTGIBZLK3S2G3J/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDRDDPDN3VFIYXJIYEABY6USX5EU66AG/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDDC2VOX7OQC6OHMYTVD4HLFZIV6PYBC/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SINP4OVYNB2AGDYI2GS37EMW3H3F7XPZ/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOX7BCN6YL7B3RFPEEXPIU5CMTEHJOKR/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZXC32CJ7TWDPJO6GY2XIQRO7JZX5FLP/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XWMBD4LNHWEXRI6YVFWJMTJQUL5WOFTS/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YQVY5C5REXWJIORJIL2FIL3ALOEJEF72/

python-security.readthedocs.io/vuln/email-parseaddr-realname.html

security.netapp.com/advisory/ntap-20230601-0003/

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

0.002

Percentile

58.7%

JSON

Related for VERACODE:43798