Login Request a demo
BO
Product
Bottle
by Bottlepy · last CVE Jun 2, 2022
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 2Low 0
Severity
All severities4Critical1High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bottle to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31799
9.8
2%
Jun 2
Bottle before 0.12.20 mishandles errors during early request binding
Affected: before 0.12.20
CVE-2020-28473
6.8
2%
Jan 18
The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking
Affected: before 0.12.19
CVE-2016-9964
6.5
2%
Dec 16
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call
Affected: 0.12.10
CVE-2014-3137
–
3%
Oct 25
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access…
Affected: 0.10.0; 0.10.1; 0.10.2; 0.10.3; 0.10.4; 0.10.5; +20 more
Showing 4