CoreCVE
Back

HIGH

python: mailcap: findmatch() function does not sanitize the second argument

Published Apr 13, 2022

Description

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments). The fix is also back-ported to 3.7, 3.8, 3.9

Affected products

Remediation

Red Hat statement

Versions of python36:3.6/python36 as shipped with Red Hat Enterprise Linux 8 are marked as 'Not affected' as they just provide "symlinks" to the main python3 component, which provides the actual interpreter of the Python programming language.

Red Hat mitigation

Users should upgrade to the latest version. If this is not possible and the affected version of the Python mailcap module has to be used then applications that use mailcap module should verify user input before passing it to the mailcap module, and the returned command before executing it.

Metrics

Weaknesses (2)

CWE-77

CWE-88

References (34)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Apr 13, 2022
Updated Nov 3, 2025
Reserved Apr 13, 2022
Link CVE-2015-20107
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2015-20107
Red Hat
Severity Moderate
Public date Aug 2, 2015
Links CVE-2015-20107 - Bugzilla