New submission from Serhiy Storchaka <storchaka+cpyt...@gmail.com>:

There is an error in determining a sub-URI in the urllib.request module. Due to 
it, if the user is authorized for example.org/foo, it gets also access to 
example.org/foobar.

----------
components: Library (Lib)
messages: 413280
nosy: orsenthil, serhiy.storchaka
priority: high
severity: normal
status: open
title: Incorrect
type: security
versions: Python 3.10, Python 3.11, Python 3.7, Python 3.8, Python 3.9

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue46756>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to