CVE:CVE-2023-22970
CNNVD:CNNVD-202305-2283
Bottle是Bottle社区的一个基于Python的简单且轻量级的WSGI微型Web框架。
Bottles 51.0之前版本存在安全漏洞，该漏洞源于错误处理 YAML，允许通过精心制作的文件远程执行代码。
solution:Upgrade usebottles bottles to a higher version than 51.0,and avoid the version (,51.0); Upgrade fedoraproject fedora to a higher version than 37,38,and avoid the version 37,38