[New-bugs-announce] [issue46756] Incorrect

Serhiy Storchaka report at bugs.python.org
Tue Feb 15 04:48:07 EST 2022


New submission from Serhiy Storchaka <storchaka+cpython at gmail.com>:

There is an error in determining a sub-URI in the urllib.request module. Due to it, if the user is authorized for example.org/foo, it gets also access to example.org/foobar.

----------
components: Library (Lib)
messages: 413280
nosy: orsenthil, serhiy.storchaka
priority: high
severity: normal
status: open
title: Incorrect
type: security
versions: Python 3.10, Python 3.11, Python 3.7, Python 3.8, Python 3.9

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue46756>
_______________________________________


More information about the New-bugs-announce mailing list