Количество 9
Количество 9
BDU:2023-08455
Уязвимость HTTP-клиента aiohttp, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю изменить HTTP-запрос или создать новый HTTP-запрос
ROS-20240318-01
Множественные уязвимости python3-aiohttp
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio an ...
SUSE-SU-2024:0034-1
Security update for python-aiohttp
SUSE-SU-2024:0033-1
Security update for python-aiohttp
GHSA-q3qx-c6g2-7pw2
aiohttp's ClientSession is vulnerable to CRLF injection via version
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-08455 Уязвимость HTTP-клиента aiohttp, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю изменить HTTP-запрос или создать новый HTTP-запрос | CVSS3: 7.2 | 0% Низкий | около 2 лет назад |
 | ROS-20240318-01 Множественные уязвимости python3-aiohttp | CVSS3: 7.5 | больше 1 года назад | |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 7.2 | 0% Низкий | около 2 лет назад |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 5.8 | 0% Низкий | около 2 лет назад |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 7.2 | 0% Низкий | около 2 лет назад |
| CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.2 | 0% Низкий | около 2 лет назад |
 | SUSE-SU-2024:0034-1 Security update for python-aiohttp | 0% Низкий | почти 2 года назад | |
| SUSE-SU-2024:0033-1 Security update for python-aiohttp | 0% Низкий | почти 2 года назад | |
| GHSA-q3qx-c6g2-7pw2 aiohttp's ClientSession is vulnerable to CRLF injection via version | CVSS3: 7.2 | 0% Низкий | около 2 лет назад |
Уязвимостей на страницу