Lucene search
Veracode Vulnerability DatabaseVERACODE:35842HistoryJun 03, 2022 - 5:15 a.m.
Validation Bypass
2022-06-0305:15:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
bottle
validation
vulnerability
library
errors
request binding
attacker
compromise
target system
EPSS
0.014
Percentile
86.6%
bottle is vulnerable to validation bypass. The library mishandles errors in _handle function during early request binding, allowing an attacker to compromise the target system.
References
github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c
github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00
github.com/bottlepy/bottle/compare/0.12.19...0.12.20
lists.debian.org/debian-lts-announce/2022/06/msg00010.html
lists.fedoraproject.org/archives/list/[email protected]/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD/
lists.fedoraproject.org/archives/list/[email protected]/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F/
www.debian.org/security/2022/dsa-5159
Related
debian
debian
[SECURITY] [DSA 5159-1] python-bottle security update
2022-06-09 21:07:12
[SECURITY] [DLA 3048-1] python-bottle security update
2022-06-08 19:42:49
nessus
nessus
Amazon Linux 2 : python-bottle (ALAS-2022-1844)
2022-09-15 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bottle vulnerability (USN-5532-1)
2022-07-26 00:00:00
Debian DSA-5159-1 : python-bottle - security update
2022-06-10 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3048-1)
2022-06-09 00:00:00
openSUSE: Security Advisory for python-bottle (SUSE-SU-2022:3103-1)
2022-09-07 00:00:00
Ubuntu: Security Advisory (USN-5532-2)
2023-01-27 00:00:00
github
github
Denial of service in bottle
2022-06-03 00:01:15
alpinelinux
alpinelinux
CVE-2022-31799
2022-06-02 14:15:58
ubuntu
ubuntu
Bottle vulnerability
2022-07-26 00:00:00
Bottle vulnerability
2022-07-26 00:00:00
amazon
amazon
Medium: python-bottle
2022-09-01 21:09:00
nvd
nvd
CVE-2022-31799
2022-06-02 14:15:58
mageia
mageia
Updated python-bottle packages fix security vulnerability
2022-07-01 00:31:09
prion
prion
Cross site request forgery (csrf)
2022-06-02 14:15:00
suse
suse
Security update for python-bottle (important)
2022-09-06 00:00:00
osv
osv
python-bottle vulnerability
2022-07-26 14:07:42
python-bottle - security update
2022-06-09 00:00:00
Denial of service in bottle
2022-06-03 00:01:15
fedora
fedora
[SECURITY] Fedora 35 Update: python-bottle-0.12.21-2.fc35
2022-06-22 01:25:22
[SECURITY] Fedora 36 Update: python-bottle-0.12.21-2.fc36
2022-06-22 00:48:23
ibm
ibm
cvelist
cvelist
CVE-2022-31799
2022-05-29 21:25:44
debiancve
debiancve
CVE-2022-31799
2022-06-02 14:15:58
cve
cve
CVE-2022-31799
2022-06-02 14:15:58
ubuntucve
ubuntucve
CVE-2022-31799
2022-06-02 00:00:00
redos
redos
ROS-20240521-03
2024-05-21 00:00:00