Количество 41
Количество 41
CVE-2018-20060
urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.
CVE-2018-20060
urllib3 before version 1.23 does not remove the Authorization HTTP hea ...
CVE-2018-18074
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
CVE-2018-18074
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
CVE-2018-18074
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
CVE-2018-18074
The Requests package before 2.20.0 for Python sends an HTTP Authorizat ...
openSUSE-SU-2019:2133-1
Security update for python-urllib3
SUSE-SU-2019:2332-1
Security update for python-urllib3
RLSA-2019:3335
Moderate: python27:2.7 security and bug fix update
ELSA-2019-3335
ELSA-2019-3335: python27:2.7 security and bug fix update (MODERATE)
GHSA-www2-v7xj-xrc6
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
BDU:2019-02104
Уязвимость модуля urllib3 интерпретатора языка программирования Python, связанная с ошибками управления регистрационными данными, позволяющая нарушителю раскрыть защищаемую информацию
openSUSE-SU-2019:1754-1
Security update for python-requests
SUSE-SU-2022:1819-1
Security update for python-requests
SUSE-SU-2022:1448-1
Security update for python-requests
SUSE-SU-2020:0555-1
Security update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer
SUSE-SU-2019:1487-1
Security update for python-requests
GHSA-x84v-xcm2-53pg
Insufficiently Protected Credentials in Requests
ELSA-2019-2035
ELSA-2019-2035: python-requests security update (LOW)
BDU:2021-01443
Уязвимость библиотеки HTTP запросов языка программирования Python Requests, связанная с недостатком механизма хранения регистрационных данных, позволяющая нарушителю получить доступ к конфиденциальным данным
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-20060 urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext. | CVSS3: 9.8 | 0% Низкий | больше 6 лет назад |
| CVE-2018-20060 urllib3 before version 1.23 does not remove the Authorization HTTP hea ... | CVSS3: 9.8 | 0% Низкий | больше 6 лет назад |
 | CVE-2018-18074 The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network. | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
 | CVE-2018-18074 The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network. | CVSS3: 2.6 | 0% Низкий | почти 7 лет назад |
| CVE-2018-18074 The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network. | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
| CVE-2018-18074 The Requests package before 2.20.0 for Python sends an HTTP Authorizat ... | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
 | openSUSE-SU-2019:2133-1 Security update for python-urllib3 | почти 6 лет назад | ||
| SUSE-SU-2019:2332-1 Security update for python-urllib3 | почти 6 лет назад | ||
 | RLSA-2019:3335 Moderate: python27:2.7 security and bug fix update | больше 5 лет назад | ||
| ELSA-2019-3335 ELSA-2019-3335: python27:2.7 security and bug fix update (MODERATE) | больше 5 лет назад | ||
| GHSA-www2-v7xj-xrc6 Exposure of Sensitive Information to an Unauthorized Actor in urllib3 | CVSS3: 9.8 | 0% Низкий | больше 6 лет назад |
 | BDU:2019-02104 Уязвимость модуля urllib3 интерпретатора языка программирования Python, связанная с ошибками управления регистрационными данными, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 9.8 | 0% Низкий | около 6 лет назад |
| openSUSE-SU-2019:1754-1 Security update for python-requests | 0% Низкий | почти 6 лет назад | |
| SUSE-SU-2022:1819-1 Security update for python-requests | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2022:1448-1 Security update for python-requests | 0% Низкий | около 3 лет назад | |
| SUSE-SU-2020:0555-1 Security update for python-aws-sam-translator, python-boto3, python-botocore, python-cfn-lint, python-jsonschema, python-nose2, python-parameterized, python-pathlib2, python-pytest-cov, python-requests, python-s3transfer | 0% Низкий | больше 5 лет назад | |
| SUSE-SU-2019:1487-1 Security update for python-requests | 0% Низкий | около 6 лет назад | |
| GHSA-x84v-xcm2-53pg Insufficiently Protected Credentials in Requests | CVSS3: 7.5 | 0% Низкий | больше 6 лет назад |
| ELSA-2019-2035 ELSA-2019-2035: python-requests security update (LOW) | почти 6 лет назад | ||
| BDU:2021-01443 Уязвимость библиотеки HTTP запросов языка программирования Python Requests, связанная с недостатком механизма хранения регистрационных данных, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 9.8 | 0% Низкий | больше 6 лет назад |
Уязвимостей на страницу