Maple Labs

CVE search · CVE-2021-28861

CVE-2021-28861

high 7.4

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

Open in the NVD CVE.org JSON

Details

Status
Modified disputed
Published
Last changed
Source
cve@mitre.org
Weakness
CWE-601

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N nvd@nist.govPrimary
CVSS 3.1 medium 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References