CVE-2023-49081

🗓️ 30 Nov 2023 07:08:15Reported by GitHub_MType

aiohttp async HTTP client/server framework, improper validation allows HTTP request modification, patched in version 3.9.0

Reporter	Title	Published	Views	Family All 61
RedhatCVE	CVE-2023-49081	30 Nov 202310:26	–	redhatcve
OSV	CVE-2023-49081	30 Nov 202307:15	–	osv
OSV	PYSEC-2023-250	30 Nov 202307:15	–	osv
OSV	CGA-4pr8-qqxf-65pm	6 Jun 202412:23	–	osv
OSV	Improper validation in meraki	13 Dec 202313:35	–	osv
OSV	aiohttp's ClientSession is vulnerable to CRLF injection via version	27 Nov 202323:17	–	osv
OSV	python310-aiohttp-3.9.3-2.1 on GA media	15 Jun 202400:00	–	osv
OSV	python-aiohttp - security update	11 Dec 202400:00	–	osv
OSV	Red Hat Security Advisory: Satellite 6.14.3 Async Security Update	18 Sep 202405:49	–	osv
OSV	Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update	30 Sep 202415:56	–	osv

Nvd

Vulners

Node

aiohttp aiohttpRange<3.9.0

[
  {
    "vendor": "aio-libs",
    "product": "aiohttp",
    "versions": [
      {
        "version": "< 3.9.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
gist	www.gist.github.com/jnovikov/184afb593d9c2114d77f508e0ccd508e
github	www.github.com/aio-libs/aiohttp/pull/7835/files
github	www.github.com/aio-libs/aiohttp/commit/1e86b777e61cf4eefc7d92fa57fa19dcc676013b
github	www.github.com/aio-libs/aiohttp/security/advisories/GHSA-q3qx-c6g2-7pw2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Nov 2023 07:15Current

6Medium risk

Vulners AI Score6

CVSS35.3

EPSS0.001

CWE-20