Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2020-26137

Опубликовано: 21 дек. 2020
Источник: msrc
CVSS3: 6.5
EPSS Низкий

Описание

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

EPSS

Процентиль: 47%
0.00239
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 5 лет назад

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

CVSS3: 6.5
redhat
больше 5 лет назад

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

CVSS3: 6.5
nvd
около 5 лет назад

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

CVSS3: 6.5
debian
около 5 лет назад

urllib3 before 1.25.9 allows CRLF injection if the attacker controls t ...

suse-cvrf
около 4 лет назад

Security update for aws-cli, python-boto3, python-botocore, python-service_identity, python-trustme, python-urllib3

EPSS

Процентиль: 47%
0.00239
Низкий

6.5 Medium

CVSS3