Lucene search
RedHatRHSA-2024:2734HistoryMay 22, 2024 - 8:31 p.m.
(RHSA-2024:2734) Moderate: Red Hat OpenStack Platform 17.1 (python-urllib3) security update
2024-05-2220:31:21
access.redhat.com
17
red hat
openstack
security update
python-urllib3
redirect vulnerability
cvss score
cve page
http module
CVSS3
4.2
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
9.8%
Python HTTP module with connection pooling and file POST abilities.
Security Fix(es):
- Request body not stripped after redirect from 303 status changes request
method to GET (CVE-2023-45803)
For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE
page listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | noarch | python3-urllib3 | < 1.25.10-6.el8ost | python3-urllib3-1.25.10-6.el8ost.noarch.rpm |
Related
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 17.1 (python-urllib3) (RHSA-2024:2734)
2024-05-22 00:00:00
CBL Mariner 2.0 Security Update: python-urllib3 (CVE-2023-45803)
2024-08-30 00:00:00
SUSE SLED12 / SLES12 Security Update : python-urllib3 (SUSE-SU-2023:4468-1)
2023-11-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2023:4467-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4468-1)
2023-11-17 00:00:00
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2024-1185)
2024-02-09 00:00:00
redos
redos
ROS-20240403-11
2024-04-03 00:00:00
github
github
wolfi
wolfi
CVE-2023-45803 vulnerabilities
2024-09-12 09:12:41
osv
osv
CGA-9mxq-c62w-h5rv
2024-06-06 12:25:28
CVE-2023-45803
2023-10-17 20:15:10
fedora
fedora
[SECURITY] Fedora 38 Update: python-urllib3-1.26.18-1.fc38
2023-10-21 01:30:09
[SECURITY] Fedora 37 Update: python-urllib3-1.26.18-1.fc37
2023-11-03 01:10:53
[SECURITY] Fedora 39 Update: python-urllib3-1.26.18-1.fc39
2023-11-03 19:01:21
cve
cve
CVE-2023-45803
2023-10-17 20:15:10
ibm
ibm
debiancve
debiancve
CVE-2023-45803
2023-10-17 20:15:10
cvelist
cvelist
CVE-2023-45803 Request body not stripped after redirect in urllib3
2023-10-17 19:43:45
cgr
cgr
CVE-2023-45803 vulnerabilities
2024-05-19 03:07:16
redhatcve
redhatcve
CVE-2023-45803
2023-10-29 14:55:37
cbl_mariner
cbl_mariner
amazon
amazon
Medium: python-urllib3
2024-01-03 21:04:00
alpinelinux
alpinelinux
CVE-2023-45803
2023-10-17 20:15:10
nvd
nvd
CVE-2023-45803
2023-10-17 20:15:10
prion
prion
Design/Logic Flaw
2023-10-17 20:15:00
veracode
veracode
Information Disclosure
2023-10-19 07:19:20
ubuntucve
ubuntucve
CVE-2023-45803
2023-10-17 00:00:00
oraclelinux
oraclelinux
python-urllib3 security update
2024-01-25 00:00:00
python-urllib3 security update
2024-01-10 00:00:00
fence-agents security and bug fix update
2024-05-23 00:00:00
almalinux
almalinux
Moderate: python-urllib3 security update
2024-01-25 00:00:00
Moderate: resource-agents security and bug fix update
2024-05-22 00:00:00
Moderate: python-urllib3 security update
2024-01-10 00:00:00
redhat
redhat
(RHSA-2024:0300) Moderate: python-urllib3 security update
2024-01-18 16:12:51
(RHSA-2024:2952) Moderate: resource-agents security and bug fix update
2024-05-22 06:35:10
(RHSA-2024:0588) Moderate: python-urllib3 security update
2024-01-30 12:53:27
photon
photon
Moderate Photon OS Security Update - PHSA-2024-5.0-0211
2024-02-16 00:00:00
aix
aix
ubuntu
ubuntu
pip vulnerabilities
2023-11-15 00:00:00
urllib3 vulnerabilities
2023-11-07 00:00:00
rocky
rocky
fence-agents security and bug fix update
2024-06-14 13:59:30
cloudfoundry
cloudfoundry
USN-6473-1: urllib3 vulnerabilities | Cloud Foundry
2023-11-09 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
4.2
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0
Percentile
9.8%
Related for RHSA-2024:2734