OESA-2022-1712
Dashboard / Vulnerabilities / OESA-2022-1712
Summary: python-bottle security update
Details: Bottle is a fast, simple and lightweight WSGI micro web-framework for Python. It is distributed as a single file module and has no dependencies other than the Python Standard Library. Security Fix(es): Bottle before 0.12.20 mishandles errors during early request binding.(CVE-2022-31799)
References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1712, https://nvd.nist.gov/vuln/detail/CVE-2022-31799
Affected packages
Package
Name: python-bottle
Purl: pkg:rpm/openEuler/python-bottle&distro=openEuler-20.03-LTS-SP1
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -0.12.13-9.oe1
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
