CVE Catalog
CVE-2024-6923
MediumSummary
In CPython, the email module does not properly quote newlines in email headers during serialization, allowing header injection when an email is serialized. This is a medium severity vulnerability.
Risk Assessment
An attacker can inject additional email headers, potentially leading to message forgery, phishing, or bypassing spam filters.
Recommendation
Update CPython to a version that fixes newline quoting in the email module.
Original NVD description (English source)
There is a MEDIUM severity vulnerability affecting CPython. The email module didn’t properly quote newlines for email headers when serializing an email message allowing for header injection when an email is serialized.