CVE-2016-9964
redirect() in bottle.py in bottle 0.12.10 doesn't filter a "\r\n" sequence, which leads to a CRLF attack, as demonstrated by a redirect("233\r\nSet-Cookie: name=salt") call.
| Software | From | Fixed in |
|---|---|---|
| bottlepy / bottle | 0.12.10 | 0.12.10.x |
| debian / debian_linux | 8.0 | 8.0.x |
bottle
|
- | 0.12.10 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime