AVG-1485 log
| Package | python-bottle, python2-bottle |
| Status | Fixed |
| Severity | Medium |
| Type | incorrect calculation |
| Affected | 0.12.18-3 |
| Fixed | 0.12.19-1 |
| Current | 0.12.25-5 [extra] |
| Ticket | None |
| Created | Wed Jan 20 19:42:06 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2020-28473 | Medium | Yes | Incorrect calculation | The package python-bottle from 0 and before 0.12.19 are vulnerable to Web Cache Poisoning by using a vector called parameter cloaking. When the attacker can... |