Python · Python · CVE-2023-27043
**Name of the Vulnerable Software and Affected Versions**
Python versions 0 through 2.7.18
Python versions 3.x through 3.11.3
**Description**
The email module of Python incorrectly parses e-mail addresses that contain a special character, allowing attackers to bypass protection mechanisms. This can be exploited in applications where access is granted only after verifying receipt of e-mail to a specific domain. The issue is related to insufficient input validation.
**Recommendations**
For Python versions 0 through 2.7.18, update to a version later than 2.7.18.
For Python versions 3.x through 3.11.3, update to Python 3.13.
As a temporary workaround, consider restricting the use of the email module until a patch is available.