fedoraproject fedora, netapp active iq unified manager, netapp ontap select deploy administration utility +1 lainnya
CVSS 5.3 · Medium EPSS 2,5%
Kerentanan Improper Input Validation pada fedoraproject fedora, netapp active iq unified manager +2 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.
The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| fedoraproject | fedora | Versi 38 |
| fedoraproject | fedora | Versi 39 |
| netapp | active iq unified manager | Semua versi |
| netapp | ontap select deploy administration utility | Semua versi |
| python | python | Semua versi hingga 2.7.18 |
| python | python | Versi 3.0 hingga sebelum 3.8.20 |
| python | python | Versi 3.9.0 hingga sebelum 3.9.20 |
| python | python | Versi 3.10.0 hingga sebelum 3.10.15 |
| python | python | Versi 3.11.0 hingga sebelum 3.11.10 |
| python | python | Versi 3.12.0 hingga sebelum 3.12.6 |