Security Advisory

CVE-2019-6802

6.1
MEDIUM

Vulnerability Description

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.
Published Date January 25, 2019
Official Source NIST NVD Advisory