VULNERABILITY INTELLIGENCE

CVE-2024-6923

CVSS score5.5 MEDIUM
EPSS probability1.10%
CISA KEVNot currently listed
Published2024-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Description

There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-94

Primary references