CVE-2025-15367

Sažetak

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

Reference

https://github.com/python/cpython/commit/b234a2b67539f787e191d2ef19a7cbdce32874e7
https://github.com/python/cpython/issues/143923
https://github.com/python/cpython/pull/143924
https://mail.python.org/archives/list/security-announce@python.org/thread/CBFBOWVGGUJFSGITQCCBZS4GEYYZ7ZNE/

CVSS

Base:	0.0
Impact:	None
Exploitability:	None

Pristup

Vektor	Složenost	Autentikacija
None	None	None

Impact

Povjerljivost	Cjelovitost	Dostupnost
None	None	None

CVSS vektor

None

Zadnje važnije ažuriranje

26-01-2026 - 15:05

Objavljeno

20-01-2026 - 22:15