Home / Vulnerability Database / Python : Obsolete or unsafe function
Python
Python : Obsolete or unsafe function
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
PCI DSS 4.0
HIPAA
CWE/SANS Top 25 2011
Overview
The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.
The smtplib library in CPython (aka Python) before 2.7.12, 3.x to 3.4.5, and 3.5.x to 3.5.2 does not return an error if the SMTP.starttls(), which can allow “man-in-the-middle” attacks to bypass the protection of TLS. I.e., using the network location between the client and the registry, block the StartTLS command.
MEDIUM
DerScanner Severity Score
Do you want to fix Python : Obsolete or unsafe function in your application?
See also
Python
Python : Debug mode on
Python
Python : Web3: Deprecated method
Python
