bottlepy Bottle 0.12.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bottlepy:bottle:0.12.3:*:*:*:*:*:*:*

part: a version: 0.12.3 update: *

VendorBottlepy (38805570-29df-55f6-96eb-37baf7691b21)
ProductBottle (be3c787d-8aaf-5d5f-9411-cde8ced2e743)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/python-bottle purl2cpe 2026-06-01 10:10:55.633425
pkg:deb/ubuntu/python-bottle purl2cpe 2026-06-01 10:10:55.633427
pkg:github/bottlepy/bottle purl2cpe 2026-06-01 10:10:55.633429
pkg:pypi/bottle purl2cpe 2026-06-01 10:10:55.633432
pkg:rpm/fedora/python-bottle purl2cpe 2026-06-01 10:10:55.633434
pkg:rpm/opensuse/python-bottle purl2cpe 2026-06-01 10:10:55.633436

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-3137 vulnerable 2026-06-08 05:05:31.292323 Details available
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Published: 2014-10-25T22:00:00.000Z
Updated: 2024-08-06T10:35:56.668Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.