Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-47081

Опубликовано: 11 июл. 2025
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

Requests vulnerable to .netrc credentials leak via malicious URLs

EPSS

Процентиль: 13%
0.00044
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
redhat
5 месяцев назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
nvd
5 месяцев назад

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

CVSS3: 5.3
debian
5 месяцев назад

Requests is a HTTP library. Due to a URL parsing issue, Requests relea ...

suse-cvrf
4 месяца назад

Security update for python-requests

EPSS

Процентиль: 13%
0.00044
Низкий

5.3 Medium

CVSS3