CVE-2023-27043

Advisory

The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses that contain a special character. This vulnerability allows attackers to send messages from e-mail addresses that would otherwise be rejected.
https://github.com/python/cpython/issues/102988
https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html

Affected package

Affected versions

Fixed versions

Vulnerability changelog

The e-mail module of Python 0 - 2.7.18, 3.x - 3.11 incorrectly parses e-mail addresses which contain a special character. This vulnerability allows attackers to send messages from e-ail addresses that would otherwise be rejected. See CVE-2023-27043.


MISC:http://python.com: http://python.com
MISC:https://github.com/python/cpython/issues/102988: https://github.com/python/cpython/issues/102988

Resources

• http://python.com
• https://github.com/python/cpython/issues/102988
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27043
• http://python.org
• https://python-security.readthedocs.io/vuln/email-parseaddr-realname.html
• https://security.netapp.com/advisory/ntap-20230601-0003/