Textproto Package Error Message Injection Vulnerability

Executive Summary

This vulnerability occurs in the net/textproto package where functions return errors that include the input data as part of the error message.

Because the input is included in the error, an attacker might be able to inject misleading or malicious content into these error messages that are printed or logged.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to inject misleading content into error messages that are printed or logged.

This could cause confusion or misinterpretation of logs or error outputs, potentially hiding real issues or causing incorrect responses based on the misleading information.

Useful 0 Not Useful 0