Vulnerabilities

CVE-2019-6802 | BDVDB-2026-112255 Detail

Description#

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/pypiserver/pypiserver/issues/237

Exploit#

No public exploit known

History#

Version 12019-01-25Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.