Description

The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character. This vulnerability allows attackers to send messages from e-ail addresses that would otherwise be rejected.

Remediation

References

CVE-2023-27043

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-26594)

WordPress 3.6 Multiple Vulnerabilities (2.0 - 3.6)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (3.8.1)

WordPress Plugin Payment Gateways Caller for WP e-Commerce Local File Inclusion (0.1)

PHP Other Vulnerability (CVE-2007-4441)

Severity

Medium

Classification

CVE-2023-27043 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities