Showing 1 vulnerability on this page for pypiserver

Signals CISA KEV Ransomware Nuclei
PyPI vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

CRLF Injection in pypiserver

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

CWE-74CWE-79Jan 25, 20191 related artifact
CVSS6.1v3.0EPSS3.96%PoCs0SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX