CVE:CVE-2022-31799
CNNVD:CNNVD-202206-113
Bottle是Bottle社区的一个基于Python的简单且轻量级的WSGI微型Web框架。
Bottle 存在安全特征问题漏洞，该漏洞源于早期请求绑定期间的处理错误。远程攻击者利用该漏洞可以破坏目标系统。
solution:Upgrade bottlepy bottle to a higher version than 0.12.20,and avoid the version (,0.12.20); Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0; Upgrade fedoraproject fedora to a higher version than 35,36,and avoid the version 35,36