2019-03-08 22:29:00 2019-06-13 18:29:01

Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization. The impact is: Information disclosure (credentials, cookies, etc. that are cached against a given hostname). The components are: urllib.parse.urlsplit, urllib.parse.urlparse. The attack vector is: A specially crafted URL could be incorrectly parsed to locate cookies or authentication data and send that information to a different host than when parsed correctly.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Python Python 3.7.2 Rc1 (not an official CPE) Python Python 3.7.2 - (not an official CPE) Python Python 3.7.2 (not an official CPE) Python Python 3.7.1 Rc2 (not an official CPE) Python Python 3.7.1 Rc1 (not an official CPE) Python Python 3.7.1 - (not an official CPE) Python Python 3.7.1 (not an official CPE) Python Python 3.7.0 Rc1 (not an official CPE) Python Python 3.7.0 Beta5 (not an official CPE) Python Python 3.7.0 Beta4 (not an official CPE) Python Python 3.7.0 Beta3 (not an official CPE) Python Python 3.7.0 Beta2 (not an official CPE) Python Python 3.7.0 Beta1 (not an official CPE) Python Python 3.7.0 Alpha4 (not an official CPE) Python Python 3.7.0 Alpha3 (not an official CPE) Python Python 3.7.0 Alpha2 (not an official CPE) Python Python 3.7.0 Alpha1 (not an official CPE) Python Python 3.7.0 - (not an official CPE) Python Python 3.7.0 (not an official CPE) Python Python 3.7 Beta (not an official CPE) Python Python 3.6.7 (not an official CPE) Python Python 3.6.6 Rc1 (not an official CPE) Python Python 3.6.6 - (not an official CPE) Python Python 3.6.6 (not an official CPE) Python Python 3.6.5 Rc1 (not an official CPE) Python Python 3.6.5 - (not an official CPE) Python Python 3.6.5 (not an official CPE) Python Python 3.6.4 Rc1 (not an official CPE) Python Python 3.6.4 - (not an official CPE) Python Python 3.6.4 (not an official CPE) Python Python 3.6.3 Rc1 (not an official CPE) Python Python 3.6.2 Rc1 (not an official CPE) Python Python 3.6.2 Rc2 (not an official CPE) Python Python 3.6.3 (not an official CPE) Python Python 3.6.3 - (not an official CPE) Python Python 3.6.2 - (not an official CPE) Python Python 3.6.2 (not an official CPE) Python Python 3.6.1 Rc1 (not an official CPE) Python Python 3.6.1 - (not an official CPE) Python Python 3.6.1 (not an official CPE) Python Python 3.6.0 Rc2 (not an official CPE) Python Python 3.6.0 Rc1 (not an official CPE) Python Python 3.6.0 Beta4 (not an official CPE) Python Python 3.6.0 Beta3 (not an official CPE) Python Python 3.6.0 Beta2 (not an official CPE) Python Python 3.6.0 Beta1 (not an official CPE) Python Python 3.6.0 Alpha4 (not an official CPE) Python Python 3.6.0 Alpha3 (not an official CPE) Python Python 3.6.0 Alpha2 (not an official CPE) Python Python 3.6.0 Alpha1 (not an official CPE) Python Python 3.6.0 - (not an official CPE) Python Python 3.6.0 (not an official CPE) Python Python 3.6 (not an official CPE) Python Python 3.5.6 (not an official CPE) Python Python 3.5.5 Rc1 (not an official CPE) Python Python 3.5.5 - (not an official CPE) Python Python 3.5.5 (not an official CPE) Python Python 3.5.4 Rc1 (not an official CPE) Python Python 3.5.4 - (not an official CPE) Python Python 3.5.3 Rc1 (not an official CPE) Python Python 3.5.4 (not an official CPE) Python Python 3.5.3 - (not an official CPE) Python Python 3.5.3 (not an official CPE) Python Python 3.5.2 Rc1 (not an official CPE) Python Python 3.5.2 - (not an official CPE) Python Python 3.5.2 (not an official CPE) Python Python 3.5.1 - (not an official CPE) Python Python 3.5.1 Rc1 (not an official CPE) Python Python 3.5.1 (not an official CPE) Python Python 3.5.0 Rc4 (not an official CPE) Python Python 3.5.0 Rc1 (not an official CPE) Python Python 3.5.0 Rc3 (not an official CPE) Python Python 3.5.0 Rc2 (not an official CPE) Python Python 3.5.0 Beta4 (not an official CPE) Python Python 3.5.0 Beta3 (not an official CPE) Python Python 3.5.0 Beta2 (not an official CPE) Python Python 3.5.0 Beta1 (not an official CPE) Python Python 3.5.0 Alpha4 (not an official CPE) Python Python 3.5.0 Alpha3 (not an official CPE) Python Python 3.5.0 Alpha2 (not an official CPE) Python Python 3.5.0 Alpha1 (not an official CPE) Python Python 3.5.0 - (not an official CPE) Python Python 3.5.0 (not an official CPE) Python Python 3.5 (not an official CPE) Python Python 3.4.9 (not an official CPE) Python Python 3.4.7 (not an official CPE) Python Python 3.4.6 (not an official CPE) Python Python 3.4.5 (not an official CPE) Python Python 3.4.4 (not an official CPE) Python Python 3.4.3 (not an official CPE) Python 3.4.2 Python 3.4.1 Python 3.4.0 Python 3.4 alpha 1 Python Python 3.3.7 (not an official CPE) Python 3.3.6 release candidate 1 Python Python 3.3.6 (not an official CPE) Python 3.3.5 release candidate 2 Python 3.3.5 release candidate 1 Python 3.3.5 Python Python 3.3.5 (not an official CPE) Python 3.3.4 release candidate 1 Python 3.3.4 Python 3.3.3 release candidate 2 Python 3.3. release candidate 1 Python 3.3.3 Python 3.3.2 Python 3.3.1 release candidate 1 Python 3.3.1 Python 3.3.0 Python 3.3 beta 2 Python 3.3 Python 3.2.2150 Python 3.2.6 Python 3.2.5 Python 3.2.4 Python 3.2.3 Python 3.2.2 Python 3.2.1 Python 3.2.0 Python 3.2-alpha Python 3.2 Python 3.1.2150 (x64) 64-bit Python 3.1.5 Python 3.1.4 Python 3.1.3 Python 3.1.2 Python 3.1.1 Python Python 3.1.0 (not an official CPE) Python 3.1 Python 3.0.1 Python Python 3.0.0 (not an official CPE) Python Python 2.7.16 Rc1 (not an official CPE) Python Python 2.7.16 - (not an official CPE) Python Python 2.7.14 (not an official CPE) Python Python 2.7.15 (not an official CPE) Python Python 2.7.13 (not an official CPE) Python Python 2.7.12 (not an official CPE) Python Python 2.7.11 (not an official CPE) Python Python 2.7.10 (not an official CPE) Python Python 2.7.9 (not an official CPE) Python Python 2.7.8 (not an official CPE) Python 2.7.7 Python 2.7.6 Python 2.7.5 Python 2.7.4 Python 2.7.3 Python 2.7.2 Release Candidate 1 Python Python 2.7.2 (not an official CPE) Python 2.7.1 Release Candiate 1 Python 2.7.1 Python Python 2.7.0 (not an official CPE)