VDB

GCVE-110-MAGEIA-2017-31

GCVE-110-MAGEIA-2017-31
Advisory Published
Vulnetix · Advisory published January 29, 2017
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call. (CVE-2016-9964)

Affected Products

VendorProductVersionsPlatforms
Mageiagnome-calculator3.24.0-1.1.mga6 (unaffected), 0 (affected)—
Mageiapython-bottle0 (affected), 0.12.11-1.mga5 (unaffected), 0 (affected), 0.12.11-1.mga5 (unaffected)—

Browse GCVE Records

6,043 records in the GCVE database · Updated October 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›