Lucene search

CRLF injection in httplib2

🗓️ 20 May 2020 15:47:55Reported by GitHub Advisory DatabaseType

CRLF injection impacts httplib2 softwar

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 77
Prion	Design/Logic Flaw	20 May 202016:15	–	prion
Tenable Nessus	Oracle Linux 7 : resource-agents (ELSA-2020-5004)	7 Sep 202300:00	–	nessus
Tenable Nessus	CentOS 8 : resource-agents (CESA-2020:4605)	1 Feb 202100:00	–	nessus
Tenable Nessus	RHEL 8 : resource-agents (RHSA-2020:4605)	4 Nov 202000:00	–	nessus
Tenable Nessus	Oracle Linux 8 : resource-agents (ELSA-2020-5947)	24 Nov 202000:00	–	nessus
Tenable Nessus	Amazon Linux AMI : python-httplib2 (ALAS-2020-1420)	31 Aug 202000:00	–	nessus
Tenable Nessus	Oracle Linux 7 : fence-agents (ELSA-2020-5003)	12 Nov 202000:00	–	nessus
Tenable Nessus	RHEL 7 : resource-agents (RHSA-2020:5004)	11 Nov 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-11078	4 Mar 202500:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : resource-agents Vulnerability (NS-SA-2021-0155)	27 Oct 202100:00	–	nessus

Vulners

Node

httplib2_project httplib2Range<0.18.0

Source	Link
github	www.github.com/httplib2/httplib2/security/advisories/GHSA-gg84-qgv9-w4pq
github	www.github.com/httplib2/httplib2/commit/a1457cc31f3206cf691d11d2bf34e98865873e9e
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-11078
lists	www.lists.apache.org/thread.html/rc9eff9572946142b657c900fe63ea4bbd3535911e8d4ce4d08fe4b89@%3Ccommits.allura.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2020/06/msg00000.html
lists	www.lists.apache.org/thread.html/r23711190c2e98152cb6f216b95090d5eeb978543bb7e0bad22ce47fc@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/r69a462e690b5f2c3d418a288a2c98ae764d58587bd0b5d6ab141f25f@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/rad8872fc99f670958c2774e2bf84ee32a3a0562a0c787465cf3dfa23@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/r4d35dac106fab979f0db75a07fc4e320ad848b722103e79667ff99e1@%3Cissues.beam.apache.org%3E
lists	www.lists.apache.org/thread.html/r7f364000066748299b331b615ba51c62f55ab5b201ddce9a22d98202@%3Cissues.beam.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

20 May 2020 15:55Current

0.8Low risk

Vulners AI Score0.8

CVSS24.3

CVSS36.8

EPSS0.03194

CWE-93