Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 9

Количество 9

ubuntu логотип

CVE-2022-36087

около 4 лет назад

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2022-36087

около 4 лет назад

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
EPSS: Низкий
nvd логотип

CVE-2022-36087

около 4 лет назад

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2022-36087

около 4 лет назад

OAuthLib is an implementation of the OAuth request-signing logic for P ...

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-3pgj-pg6c-r5p7

около 4 лет назад

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

CVSS3: 5.7
EPSS: Низкий
oracle-oval логотип

ELSA-2023-2161

больше 3 лет назад

ELSA-2023-2161: fence-agents security and bug fix update (MODERATE)

EPSS: Низкий
fstec логотип

BDU:2025-09877

около 4 лет назад

Уязвимость реализация логики подписи запросов OAuth для Python OAuthLib, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
EPSS: Низкий
redos логотип

ROS-20250731-01

больше 1 года назад

Уязвимость python3-oauthlib

CVSS3: 6.5
EPSS: Низкий
altlinux логотип

ALT-PU-2022-3443

почти 4 года назад

ALT-PU-2022-3443: package `python3-module-oauthlib` update to version 3.2.2-alt1

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
2%
Низкий
около 4 лет назад
redhat логотип
CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
2%
Низкий
около 4 лет назад
nvd логотип
CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. In OAuthLib versions 3.1.1 until 3.2.1, an attacker providing malicious redirect uri can cause denial of service. An attacker can also leverage usage of `uri_validate` functions depending where it is used. OAuthLib applications using OAuth2.0 provider support or use directly `uri_validate` are affected by this issue. Version 3.2.1 contains a patch. There are no known workarounds.

CVSS3: 6.5
2%
Низкий
около 4 лет назад
debian логотип
CVE-2022-36087

OAuthLib is an implementation of the OAuth request-signing logic for P ...

CVSS3: 6.5
2%
Низкий
около 4 лет назад
github логотип
GHSA-3pgj-pg6c-r5p7

OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI

CVSS3: 5.7
2%
Низкий
около 4 лет назад
oracle-oval логотип
ELSA-2023-2161

ELSA-2023-2161: fence-agents security and bug fix update (MODERATE)

2%
Низкий
больше 3 лет назад
fstec логотип
BDU:2025-09877

Уязвимость реализация логики подписи запросов OAuth для Python OAuthLib, связанная с недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 6.5
2%
Низкий
около 4 лет назад
redos логотип
ROS-20250731-01

Уязвимость python3-oauthlib

CVSS3: 6.5
2%
Низкий
больше 1 года назад
altlinux логотип
ALT-PU-2022-3443

ALT-PU-2022-3443: package `python3-module-oauthlib` update to version 3.2.2-alt1

CVSS3: 6.5
2%
Низкий
почти 4 года назад

Уязвимостей на страницу