Skip to content

Email Header Injection Protection Bypass #76787

Open
@thedoctorsoup

Description

@thedoctorsoup
BPO 32606
Nosy @warsaw, @bitdancer, @csabella, @nitishch, @thedoctorsoup
Files
  • PythonEmailHeaderInjectionPOC.py: Bypass Proof of Concept
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2018-01-21.05:40:52.579>
    labels = ['type-security', 'library']
    title = 'Email Header Injection Protection Bypass'
    updated_at = <Date 2018-09-29.16:09:33.569>
    user = 'https://github.com/thedoctorsoup'

    bugs.python.org fields:

    activity = <Date 2018-09-29.16:09:33.569>
    actor = 'cheryl.sabella'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['Library (Lib)']
    creation = <Date 2018-01-21.05:40:52.579>
    creator = 'thedoctorsoup'
    dependencies = []
    files = ['47396']
    hgrepos = []
    issue_num = 32606
    keywords = []
    message_count = 4.0
    messages = ['310367', '310904', '310911', '326682']
    nosy_count = 5.0
    nosy_names = ['barry', 'r.david.murray', 'cheryl.sabella', 'nitishch', 'thedoctorsoup']
    pr_nums = []
    priority = 'normal'
    resolution = None
    stage = None
    status = 'open'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue32606'
    versions = []

    Metadata

    Metadata

    Assignees

    No one assigned

      Labels

      Projects

      No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions