Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2025-5823

Низкий

ALT-PU-2025-5823: package httpie update to version 3.2.4-alt5

Источник
errata.altlinux.org
Дата публикации
23.04.2025
Дата обновления
23.04.2025
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades httpie to version 3.2.4-alt5.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and hosts they belonged. This behavior resulted in the exposure of some cookies when there are redirects originating from the actual host to a third party website. Users are advised to upgrade. There are no known workarounds.

CVSS3: 6.5
nvd
больше 4 лет назад

HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and hosts they belonged. This behavior resulted in the exposure of some cookies when there are redirects originating from the actual host to a third party website. Users are advised to upgrade. There are no known workarounds.

CVSS3: 6.5
debian
больше 4 лет назад

HTTPie is a command-line HTTP client. HTTPie has the practical concept ...

CVSS3: 5.3
ubuntu
больше 4 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.

CVSS3: 5.3
nvd
больше 4 лет назад

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.