2 results · Clear filters · Feed
-
Critical 9.8
Denial of service in bottle
Bottle before 0.12.20 mishandles errors during early request binding.
-
Critical 9.8
Bottle does not properly limit content-types
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Ty…