Описание
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/focal | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| esm-infra-legacy/trusty | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.6.3-2ubuntu1 |
| esm-infra-legacy/trusty | ignored | changes too intrusive |
| esm-infra-legacy/xenial | released | 1.13.1-2ubuntu0.16.04.4+esm4 |
| esm-infra/bionic | released | 1.22-1ubuntu0.18.04.2+esm4 |
| esm-infra/focal | released | 1.25.8-2ubuntu0.4+esm5 |
| jammy | released | 1.26.5-1~exp1ubuntu0.7 |
| noble | released | 2.0.7-1ubuntu0.7 |
| questing | released | 2.3.0-3ubuntu0.6 |
| resolute | released | 2.6.3-1ubuntu1.1 |
| stonking | not-affected | 2.6.3-2ubuntu1 |
Показывать по
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=False) still forward these sensitive headers. This vulnerability is fixed in 2.7.0.
urllib3: Sensitive headers forwarded across origins in proxied low-level redirects
urllib3 is an HTTP client library for Python. From 1.23 to before 2.7. ...
EPSS
5.3 Medium
CVSS3