Поиск уязвимостей
Количество 7
Количество 7
GHSA-7wxw-4483-3m34
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body.
CVE-2022-29361
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project
CVE-2022-29361
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project
CVE-2022-29361
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below ...
BDU:2022-06319
Уязвимость библиотеки веб-приложений Pallets Werkzeug, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)
ALT-PU-2022-2662
ALT-PU-2022-2662: package `python3-module-werkzeug` update to version 2.2.2-alt1
ALT-PU-2025-3304
ALT-PU-2025-3304: package `python3-module-werkzeug` update to version 2.3.8-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-7wxw-4483-3m34 Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. | 8% Низкий | больше 4 лет назад | |
 | CVE-2022-29361 Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project | 8% Низкий | больше 4 лет назад | |
 | CVE-2022-29361 Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body. NOTE: the vendor's position is that this behavior can only occur in unsupported configurations involving development mode and an HTTP server from outside the Werkzeug project | CVSS3: 9.8 | 8% Низкий | больше 4 лет назад |
| CVE-2022-29361 Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below ... | CVSS3: 9.8 | 8% Низкий | больше 4 лет назад |
 | BDU:2022-06319 Уязвимость библиотеки веб-приложений Pallets Werkzeug, связанная с недостатками обработки HTTP-запросов, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS) | CVSS3: 9.8 | 8% Низкий | больше 4 лет назад |
| ALT-PU-2022-2662 ALT-PU-2022-2662: package `python3-module-werkzeug` update to version 2.2.2-alt1 | CVSS3: 9.8 | 8% Низкий | около 4 лет назад |
| ALT-PU-2025-3304 ALT-PU-2025-3304: package `python3-module-werkzeug` update to version 2.3.8-alt1 | CVSS3: 9.8 | больше 1 года назад |
Уязвимостей на страницу