Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-15367

POP3 command injection in user-controlled commands

Description

The poplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Python Software Foundation CPython

Default version status: unaffected

  • 0 to < 3.15.0a6affected

References