| Package | Affected versions | Patched versions |
|---|---|---|
| communications operations monitor | = 3.4≥ 4.1, ≤ 4.3 | |
| peoplesoft enterprise peopletools | = 8.57= 8.58 | |
| zfs storage appliance kit | = 8.8 | |
| python | ≥ 3.0.0, ≤ 3.0.1≥ 3.1.0, ≤ 3.1.5≥ 3.2.0, ≤ 3.2.6≥ 3.3.0, ≤ 3.3.7≥ 3.4.0, ≤ 3.4.10≥ 3.5.0, ≤ 3.5.7≥ 3.6.0, ≤ 3.6.9≥ 3.7.0, ≤ 3.7.4≤ 2.7.16 | |
| software collections | = 1.0 |
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To headers of a message could be tricked into accepting an email address that should be denied. An attack may be the same as in CVE-2019-11340; however, this CVE applies to Python more generally.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free