Skip to content
OpenAdvisories
Medium USN-5105-1 1 CVE

python-bottle vulnerability

Published Oct 6, 2021 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Bottle incorrectly handled certain inputs.
An attacker could possibly use this issue to cache malicious requests.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS python-bottle 0.12.13-1ubuntu0.1
Ubuntu · 20.04 LTS 20.04:LTS python-bottle 0.12.15-2.1ubuntu0.1

Vulnerabilities 1

  • Medium 6.8
    CVE-2020-28473

    Web Cache Poisoning

    The package bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the req…

    bottle python-bottle python-bottle Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2020-28473