Lucene search
Redhat.comRH:CVE-2023-47627HistoryNov 15, 2023 - 6:30 p.m.
CVE-2023-47627
2023-11-1518:30:25
redhat.com
access.redhat.com
11
aiohttp vulnerability parsing
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.2%
An HTTP request smuggling vulnerability was found in aiohttp. Numerous issues with HTTP parsing can allow an attacker to smuggle HTTP requests.
Related
openvas
openvas
Fedora: Security Advisory for uxplay (FEDORA-2023-bc1f081ca0)
2023-12-07 00:00:00
aiohttp < 3.8.6 HTTP Request Smuggling Vulnerability - Linux
2024-05-07 00:00:00
aiohttp < 3.8.6 HTTP Request Smuggling Vulnerability - Windows
2024-05-07 00:00:00
osv
osv
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
2023-11-14 22:20:59
PYSEC-2023-246
2023-11-14 21:15:00
CVE-2023-47627
2023-11-14 21:15:12
ubuntucve
ubuntucve
CVE-2023-47627
2023-11-14 00:00:00
CVE-2024-23829
2024-01-29 00:00:00
nessus
nessus
Fedora 38 : llhttp / python-aiohttp / uxplay (2023-bc1f081ca0)
2023-12-06 00:00:00
Fedora 39 : llhttp / python-aiohttp / uxplay (2023-5130a73b00)
2023-12-06 00:00:00
Fedora 39 : python-aiohttp (2024-f249b74f03)
2024-02-05 00:00:00
prion
prion
Input validation
2023-11-14 21:15:00
Security feature bypass
2024-01-29 23:15:00
veracode
veracode
HTTP Request Smuggling
2023-11-15 07:35:26
debiancve
debiancve
CVE-2023-47627
2023-11-14 21:15:12
CVE-2024-23829
2024-01-29 23:15:08
cve
cve
CVE-2023-47627
2023-11-14 21:15:12
CVE-2024-23829
2024-01-29 23:15:08
github
github
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
2023-11-14 22:20:59
fedora
fedora
[SECURITY] Fedora 38 Update: python-aiohttp-3.8.6-1.fc38
2023-12-07 01:59:00
[SECURITY] Fedora 39 Update: llhttp-9.1.3-1.fc39
2023-12-07 02:09:51
[SECURITY] Fedora 38 Update: llhttp-9.1.3-1.fc38
2023-12-07 01:58:59
cvelist
cvelist
CVE-2023-47627 Request smuggling in aiohttp
2023-11-14 20:48:48
nvd
nvd
CVE-2023-47627
2023-11-14 21:15:12
CVE-2024-23829
2024-01-29 23:15:08
wolfi
wolfi
CVE-2023-47627 vulnerabilities
2024-06-25 15:33:25
cgr
cgr
CVE-2023-47627 vulnerabilities
2024-05-19 03:07:16
alpinelinux
alpinelinux
CVE-2024-23829
2024-01-29 23:15:08
redos
redos
ROS-20240318-01
2024-03-18 00:00:00
redhat
redhat
ibm
ibm
Security Bulletin: IBM Cloud Pak for Network Automation 2.7.3 addresses multiple security vulnerabilities
2024-05-21 09:37:09
Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities
2024-02-15 13:15:36
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:31:55
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
0.001 Low
EPSS
Percentile
31.2%
Related for RH:CVE-2023-47627