What is GHSA-xhp9-4947-rq78?

GHSA-xhp9-4947-rq78 is a security advisory published by GitHub Security Advisories with Critical severity. Denial of service in bottle

Which CVE IDs does GHSA-xhp9-4947-rq78 cover?

GHSA-xhp9-4947-rq78 covers the following CVE IDs: CVE-2022-31799. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xhp9-4947-rq78?

GHSA-xhp9-4947-rq78 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-xhp9-4947-rq78?

GHSA-xhp9-4947-rq78 affects 1 product, including: pip/bottle:\u003c 0.12.20.

GHSA-xhp9-4947-rq78CriticalCVSS 9.8

Denial of service in bottle

Vendor

GitHub Security Advisories

Published

June 3, 2022

Last Modified

September 13, 2024

🔗 CVE IDs covered (1)

CVE-2022-31799 →

📋 Description

Bottle before 0.12.20 mishandles errors during early request binding.

🎯 Affected products1

pip/bottle:< 0.12.20

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2022-31799
https://github.com/bottlepy/bottle/commit/a2b0ee6bb4ce88895429ec4aca856616244c4c4c
https://github.com/bottlepy/bottle/commit/e140e1b54da721a660f2eb9d58a106b7b3ff2f00
https://github.com/bottlepy/bottle/compare/0.12.19...0.12.20
https://lists.debian.org/debian-lts-announce/2022/06/msg00010.html
https://www.debian.org/security/2022/dsa-5159
https://github.com/pypa/advisory-database/tree/main/vulns/bottle/PYSEC-2022-227.yaml
https://github.com/advisories/GHSA-xhp9-4947-rq78
https://lists.fedoraproject.org/archives/list/[email protected]/message/IE7U6J45PUEXIYYVWJKPM6QXIRKDK4HD
https://lists.fedoraproject.org/archives/list/[email protected]/message/KTLOQGMDZEPIYTFC2G53OQV2ULCGYS3F