Investigate vulnerability: CRLF Injection in bottle

Issue created from vulnerability 5233612

Description:

redirect() in bottle.py in bottle does not properly filter certain escape sequences which leads to a CRLF attack.

• Severity: medium
• Confidence: unknown
• Location: requirements.txt

Solution:

Upgrade to version 0.12.11 or above.

Identifiers:

• Gemnasium-8e4dcbda-f94a-4994-89e9-1467281022cd
• CVE-2016-9964

Links:

• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961
• https://nvd.nist.gov/vuln/detail/CVE-2016-9964
• https://github.com/bottlepy/bottle/issues/913
• http://www.securityfocus.com/bid/94961

Scanner:

• Name: Gemnasium