CVE-2014-3137 Bottle does not properly limit content-types
MediumCVSS 6.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi bottle(PyPI) | >= 0.10.0, < 0.10.12 | 0.10.12 |
| pypi bottle(PyPI) | = 0.10.1 | No fix listed |
| pypi bottle(PyPI) | = 0.10.10 | No fix listed |
| pypi bottle(PyPI) | = 0.10.11 | No fix listed |
| pypi bottle(PyPI) | = 0.10.2 | No fix listed |
| pypi bottle(PyPI) | = 0.10.3 | No fix listed |
| pypi bottle(PyPI) | = 0.10.4 | No fix listed |
| pypi bottle(PyPI) | = 0.10.5 | No fix listed |
| pypi bottle(PyPI) | = 0.10.6 | No fix listed |
| pypi bottle(PyPI) | = 0.10.7 | No fix listed |
| pypi bottle(PyPI) | = 0.10.8 | No fix listed |
| pypi bottle(PyPI) | = 0.10.9 | No fix listed |
| pypi bottle(PyPI) | >= 0.11.0, < 0.11.7 | 0.11.7 |
| pypi bottle(PyPI) | = 0.11.1 | No fix listed |
| pypi bottle(PyPI) | = 0.11.2 | No fix listed |
| pypi bottle(PyPI) | = 0.11.3 | No fix listed |
| pypi bottle(PyPI) | = 0.11.4 | No fix listed |
| pypi bottle(PyPI) | = 0.11.5 | No fix listed |
| pypi bottle(PyPI) | = 0.11.6 | No fix listed |
| pypi bottle(PyPI) | >= 0.12.0, < 0.12.6 | 0.12.6 |
| pypi bottle(PyPI) | = 0.12.1 | No fix listed |
| pypi bottle(PyPI) | = 0.12.2 | No fix listed |
| pypi bottle(PyPI) | = 0.12.3 | No fix listed |
| pypi bottle(PyPI) | = 0.12.4 | No fix listed |
| pypi bottle(PyPI) | = 0.12.5 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi bottle(PyPI) | >= 0.8, < 0.10.12 | 0.10.12 |
| pypi bottle(PyPI) | >= 0.11, < 0.11.7 | 0.11.7 |
| pypi bottle(PyPI) | >= 0.12, < 0.12.6 | 0.12.6 |
| pypi bottle(PyPI) | = 0.8.1 | No fix listed |
| pypi bottle(PyPI) | = 0.8.2 | No fix listed |
| pypi bottle(PyPI) | = 0.8.3 | No fix listed |
| pypi bottle(PyPI) | = 0.8.4 | No fix listed |
| pypi bottle(PyPI) | = 0.8.5 | No fix listed |
| pypi bottle(PyPI) | = 0.9.1 | No fix listed |
| pypi bottle(PyPI) | = 0.9.2 | No fix listed |
| pypi bottle(PyPI) | = 0.9.3 | No fix listed |
| pypi bottle(PyPI) | = 0.9.4 | No fix listed |
| pypi bottle(PyPI) | = 0.9.5 | No fix listed |
| pypi bottle(PyPI) | = 0.9.6 | No fix listed |
| pypi bottle(PyPI) | = 0.9.7 | No fix listed |
| pypi bottle(PyPI) | = 0.9.8 | No fix listed |
| debian/python-bottle(Debian:12) | < 0.12.6-1 | 0.12.6-1 |
| debian/python-bottle(Debian:13) | < 0.12.6-1 | 0.12.6-1 |
| debian/python-bottle(Debian:14) | < 0.12.6-1 | 0.12.6-1 |
| bottlepy bottle | = 0.10.0 | No fix listed |
| bottlepy bottle | = 0.10.1 | No fix listed |
| bottlepy bottle | = 0.10.2 | No fix listed |
| bottlepy bottle | = 0.10.3 | No fix listed |
| bottlepy bottle | = 0.10.4 | No fix listed |
| bottlepy bottle | = 0.10.5 | No fix listed |
| bottlepy bottle | = 0.10.6 | No fix listed |
| bottlepy bottle | = 0.10.7 | No fix listed |
| bottlepy bottle | = 0.10.8 | No fix listed |
| bottlepy bottle | = 0.10.9 | No fix listed |
| bottlepy bottle | = 0.10.10 | No fix listed |
| bottlepy bottle | = 0.10.11 | No fix listed |
| bottlepy bottle | = 0.11.0 | No fix listed |
| bottlepy bottle | = 0.11.1 | No fix listed |
| bottlepy bottle | = 0.11.2 | No fix listed |
| bottlepy bottle | = 0.11.3 | No fix listed |
| bottlepy bottle | = 0.11.4 | No fix listed |
| bottlepy bottle | = 0.11.5 | No fix listed |
| bottlepy bottle | = 0.11.6 | No fix listed |
| bottlepy bottle | = 0.11.7 | No fix listed |
| bottlepy bottle | = 0.12.0 | No fix listed |
| bottlepy bottle | = 0.12.1 | No fix listed |
| bottlepy bottle | = 0.12.2 | No fix listed |
| bottlepy bottle | = 0.12.3 | No fix listed |
| bottlepy bottle | = 0.12.4 | No fix listed |
| bottlepy bottle | = 0.12.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com
- github.com issue-tracking
- bugzilla.redhat.com issue-tracking patch vendor-advisory
- github.com product
- github.com
- DSA-2948 vendor-advisory
- [oss-security] 20140501 Re: CVE request: Python Bottle JSON content-type not restrictive enough mailing-list
- github.com vendor-advisory
- Debian Security Tracker CVE-2014-3137 vendor-advisory
- bugs.debian.org issue-tracking