bottlepy Bottle 0.11.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bottlepy:bottle:0.11.4:*:*:*:*:*:*:*

part: a version: 0.11.4 update: *

VendorBottlepy (38805570-29df-55f6-96eb-37baf7691b21)
ProductBottle (be3c787d-8aaf-5d5f-9411-cde8ced2e743)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-bottle purl2cpe 2026-06-01 10:10:55.633192
pkg:deb/ubuntu/python-bottle purl2cpe 2026-06-01 10:10:55.633194
pkg:github/bottlepy/bottle purl2cpe 2026-06-01 10:10:55.633196
pkg:pypi/bottle purl2cpe 2026-06-01 10:10:55.633198
pkg:rpm/fedora/python-bottle purl2cpe 2026-06-01 10:10:55.633201
pkg:rpm/opensuse/python-bottle purl2cpe 2026-06-01 10:10:55.633203

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3137 vulnerable 2026-06-08 05:05:31.288976 Details available
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Published: 2014-10-25T22:00:00.000Z
Updated: 2024-08-06T10:35:56.668Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.