CVE-2023-27043

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

The email module in Python through 3.11.3 incorrectly parses email addresses containing special characters. The wrong portion of an RFC2822 header is identified as the value of the addr-spec.

Risk Assessment

An attacker can bypass protection mechanisms that grant application access based on email addresses, potentially leading to unauthorized access.

Recommendation

It is recommended to upgrade Python to version 3.11.4 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is grant