IM
IronMonkey Threat Research

CVE-2021-28861 HIGH

Published: 2022-08-23 | Last Modified: 2025-12-17 | Status: Modified

Description

Python 3.x through 3.10 has an open redirection vulnerability in lib/http/server.py due to no protection against multiple (/) at the beginning of URI path which may leads to information disclosure. NOTE: this is disputed by a third party because the http.server.html documentation page states "Warning: http.server is not recommended for production. It only implements basic security checks."

Additional Descriptions (1)

** EN DISPUTA ** Python versiones 3.x hasta la versión 3.10, presenta una vulnerabilidad de redireccionamiento abierto en el archivo lib/http/server.py debido a una falta de protección contra múltiples (/) al principio de la ruta URI que puede conllevar a una divulgación de información. NOTA: esto es discutido por un tercero porque la página de documentación http.server.html dice "Advertencia: http.server no se recomienda para producción. Sólo implementa controles de seguridad básicos".

CVSS Metrics

Base Score: 7.4 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeCHANGED
Confidentiality ImpactHIGH
Integrity ImpactNONE
Availability ImpactNONE

Source: [email protected]

Type: Primary

Exploitability Score: 2.8

Impact Score: 4.0

Weaknesses

Source Type Description
[email protected] Primary
en CWE-601
134c704f-9b21-4f2e-91b3-4a467353bcc0 Secondary
en CWE-601

Affected Products

Vendor Product Version Update Type
python python * <built-in method update of dict object at 0x7fd36bd9d980> Application
python python * <built-in method update of dict object at 0x7fd3703b8580> Application
python python * <built-in method update of dict object at 0x7fd3848e30c0> Application
python python * <built-in method update of dict object at 0x7fd36b830e40> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36bd9ee80> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36bd9df00> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36b11b200> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36ada7240> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36bd9eb40> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36bd9e340> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd3848e3c40> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36ada5940> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36bd9c400> Application
python python 3.11.0 <built-in method update of dict object at 0x7fd36a016a80> Application
fedoraproject fedora 35 <built-in method update of dict object at 0x7fd36ada6840> Operating System
fedoraproject fedora 36 <built-in method update of dict object at 0x7fd3848e0500> Operating System
fedoraproject fedora 37 <built-in method update of dict object at 0x7fd36ada6b40> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha2:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha3:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha4:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha5:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha6:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:alpha7:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta1:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta2:*:*:*:*:*:*
Yes cpe:2.3:a:python:python:3.11.0:beta3:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
Yes cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

References