Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Python 输入验证错误漏洞
Vulnerability Description
Python是Python软件基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。 Python中存在安全漏洞，该漏洞源于邮件模块错误地处理了带有多个@字符的邮件地址。攻击者可利用该漏洞使应用程序接收到错误地址的邮件。以下产品及版本受到影响：Python 2.7.16及之前版本，3.x版本至3.5.7版本，3.6.x版本至3.6.9版本，3.7.x版本至3.7.4版本。
CVSS Information
N/A
Vulnerability Type
N/A