Количество 9
Количество 9
GHSA-q3qx-c6g2-7pw2
aiohttp's ClientSession is vulnerable to CRLF injection via version
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0.
CVE-2023-49081
aiohttp is an asynchronous HTTP client/server framework for asyncio an ...
SUSE-SU-2024:0034-1
Security update for python-aiohttp
SUSE-SU-2024:0033-1
Security update for python-aiohttp
BDU:2023-08455
Уязвимость HTTP-клиента aiohttp, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю изменить HTTP-запрос или создать новый HTTP-запрос
ROS-20240318-01
Множественные уязвимости python3-aiohttp
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-q3qx-c6g2-7pw2 aiohttp's ClientSession is vulnerable to CRLF injection via version | CVSS3: 7.2 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 7.2 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 5.8 | 0% Низкий | больше 2 лет назад |
 | CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Improper validation made it possible for an attacker to modify the HTTP request (e.g. to insert a new header) or create a new HTTP request if the attacker controls the HTTP version. The vulnerability only occurs if the attacker can control the HTTP version of the request. This issue has been patched in version 3.9.0. | CVSS3: 7.2 | 0% Низкий | больше 2 лет назад |
| CVE-2023-49081 aiohttp is an asynchronous HTTP client/server framework for asyncio an ... | CVSS3: 7.2 | 0% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:0034-1 Security update for python-aiohttp | 0% Низкий | около 2 лет назад | |
| SUSE-SU-2024:0033-1 Security update for python-aiohttp | 0% Низкий | около 2 лет назад | |
 | BDU:2023-08455 Уязвимость HTTP-клиента aiohttp, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю изменить HTTP-запрос или создать новый HTTP-запрос | CVSS3: 7.2 | 0% Низкий | больше 2 лет назад |
 | ROS-20240318-01 Множественные уязвимости python3-aiohttp | CVSS3: 7.5 | около 2 лет назад |
Уязвимостей на страницу