[New-bugs-announce] [issue46756] Incorrect
Serhiy Storchaka
report at bugs.python.org
Tue Feb 15 04:48:07 EST 2022
New submission from Serhiy Storchaka <storchaka+cpython at gmail.com>:
There is an error in determining a sub-URI in the urllib.request module. Due to it, if the user is authorized for example.org/foo, it gets also access to example.org/foobar.
----------
components: Library (Lib)
messages: 413280
nosy: orsenthil, serhiy.storchaka
priority: high
severity: normal
status: open
title: Incorrect
type: security
versions: Python 3.10, Python 3.11, Python 3.7, Python 3.8, Python 3.9
_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue46756>
_______________________________________
More information about the New-bugs-announce
mailing list