CVE-2022-31799
Description
Bottle before 0.12.20 mishandles errors during early request binding.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.323
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2022-31799 are fixed in Python-bottle 0.12.20 | Windows |
| fast and simple WSGI-framework for Python (USN-5532-1) python-bottle_0.12.13-1ubuntu0.2_all.deb | Linux |
| fast and simple WSGI-framework for Python (USN-5532-1) python3-bottle_0.12.13-1ubuntu0.2_all.deb | Linux |
| fast and simple WSGI-framework for Python (USN-5532-1) python3-bottle_0.12.15-2.1ubuntu0.2_all.deb | Linux |
| fast and simple WSGI-framework for Python (USN-5532-1) python3-bottle_0.12.19-1+deb11u1build0.22.04.1_all.deb | Linux |
| python-bottle Security Update (ALAS-2022-1844) python3-bottle-0.12.21-2.amzn2.noarch.rpm | Linux |
| python-bottle Security Update (ALAS-2023-082) python3-bottle-0.12.21-2.amzn2023.0.1.noarch.rpm | Linux |
| python-bottle Security Update (ALAS2-2022-1844) python3-bottle-0.12.21-2.amzn2.noarch.rpm | Linux |
| python-bottle Security Update (ALAS2023-2023-082) python3-bottle-0.12.21-2.amzn2023.0.1.noarch.rpm | Linux |
| Vulnerabilities CVE-2022-31799 are fixed in Python-bottle for linux 0.12.20 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234