Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Python urllib和urllib2模块信息泄露和拒绝服务漏洞
Vulnerability Description
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 Python 2.7.2之前的2.x版本和3.2.1之前的3.x版本中的urllib和urllib2模块将Location头文件重定向到file: URL。远程攻击者可以借助特制URL获取敏感信息或者导致拒绝服务（资源消耗）。
CVSS Information
N/A
Vulnerability Type
N/A