bottlepy Bottle 0.12.10
Approved changes feed: RSS · Atom
cpe:2.3:a:bottlepy:bottle:0.12.10:*:*:*:*:*:*:*part: a version: 0.12.10 update: *
| Vendor | Bottlepy (38805570-29df-55f6-96eb-37baf7691b21) |
|---|---|
| Product | Bottle (be3c787d-8aaf-5d5f-9411-cde8ced2e743) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/python-bottle |
purl2cpe | 2026-06-01 10:10:55.633269 |
pkg:deb/ubuntu/python-bottle |
purl2cpe | 2026-06-01 10:10:55.633272 |
pkg:github/bottlepy/bottle |
purl2cpe | 2026-06-01 10:10:55.633274 |
pkg:pypi/bottle |
purl2cpe | 2026-06-01 10:10:55.633276 |
pkg:rpm/fedora/python-bottle |
purl2cpe | 2026-06-01 10:10:55.633278 |
pkg:rpm/opensuse/python-bottle |
purl2cpe | 2026-06-01 10:10:55.633280 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-9964 |
vulnerable | 2026-06-08 05:08:25.128612 |
Details available
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
Published: 2016-12-16T09:02:00.000Z
Updated: 2024-08-06T03:07:31.418Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.