CVE-2011-1521 Information disclosure in n/a
Remote attackers can read local files or cause denial of service by tricking users into visiting URLs that redirect to local file paths.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2011-1521?
CVE-2011-1521 is a medium-severity vulnerability in Python Python, published on 24 May 2011. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
Weakness: CWE-399
Which versions are affected by CVE-2011-1521?
It affects 1 product.
Products include Python Python.
How do I fix CVE-2011-1521?
Upgrade to a fixed version.
Is CVE-2011-1521 being exploited?
There is no known exploitation of CVE-2011-1521 in the wild and no public exploit code.
Other vulnerabilities in Python Python
Sources
Also known as DEBIAN-CVE-2011-1521, GHSA-cq22-fw8f-mvcw, PSF-2011-2.