CVE-2024-6923

Description

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Affected Platforms

Weakness Type

CWE-94

References

• https://github.com/python/cpython/commit/06f28dc236708f72871c64d4bc4b4ea144c5014…
• https://github.com/python/cpython/commit/097633981879b3c9de9a1dd120d3aa585ecc238…
• https://github.com/python/cpython/commit/4766d1200fdf8b6728137aa2927a297e224d5fa…
• https://github.com/python/cpython/commit/4aaa4259b5a6e664b7316a4d60bdec7ee0f124d…
• https://github.com/python/cpython/commit/b158a76ce094897c870fb6b3de62887b7ccc33f…
• https://github.com/python/cpython/commit/f7be505d137a22528cb0fc004422c0081d5d90e…