Lucene search
Redhat.comRH:CVE-2023-49082HistoryNov 30, 2023 - 10:56 a.m.
CVE-2023-49082
2023-11-3010:56:09
redhat.com
access.redhat.com
8
aiohttp
flaw
smuggling
http headers
crafted requests
validation
processing
http cache
phishing attacks
A flaw was found in Aiohttp. This issue may allow an attacker to send a crafted HTTP request to the server and smuggle arbitrary HTTP headers due to improper validation of HTTP requests during the processing of the HTTP request method. By exploiting this flaw, an attacker can manipulate HTTP requests and potentially poison the HTTP cache for phishing attacks.
Related
wolfi
wolfi
CVE-2023-49082 vulnerabilities
2024-05-19 21:07:17
nessus
nessus
cgr
cgr
CVE-2023-49082 vulnerabilities
2024-05-19 03:07:16
openvas
openvas
openSUSE: Security Advisory for python (SUSE-SU-2024:0168-1)
2024-03-04 00:00:00
Fedora: Security Advisory for python-aiohttp (FEDORA-2023-a04cc349e1)
2024-01-18 00:00:00
Fedora: Security Advisory for python-pysqueezebox (FEDORA-2023-a04cc349e1)
2024-01-18 00:00:00
osv
osv
PYSEC-2023-251
2023-11-29 20:15:00
CVE-2023-49082
2023-11-29 20:15:08
aiohttp's ClientSession is vulnerable to CRLF injection via method
2023-11-27 23:17:24
debiancve
debiancve
CVE-2023-49082
2023-11-29 20:15:08
prion
prion
Design/Logic Flaw
2023-11-29 20:15:00
github
github
aiohttp's ClientSession is vulnerable to CRLF injection via method
2023-11-27 23:17:24
cve
cve
CVE-2023-49082
2023-11-29 20:15:08
ubuntucve
ubuntucve
CVE-2023-49082
2023-11-29 00:00:00
veracode
veracode
Request Smuggling
2023-11-29 06:58:43
cvelist
cvelist
fedora
fedora
[SECURITY] Fedora 38 Update: python-wled-0.4.4-11.fc38
2024-01-08 01:34:38
[SECURITY] Fedora 39 Update: python-wled-0.4.4-11.fc39
2024-01-08 01:24:14
[SECURITY] Fedora 39 Update: python-aiohttp-3.9.1-1.fc39
2024-01-08 01:24:13
redos
redos
ROS-20240318-01
2024-03-18 00:00:00
ibm
ibm
Security Bulletin: IBM Storage Fusion is vulnerable to HTTP request smuggling, denial of server due to aiohttp, cryptography.
2024-05-11 16:56:44
Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities
2024-02-15 13:15:36
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-01-31 19:31:55
redhat
redhat
(RHSA-2024:1057) Important: Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
2024-02-29 19:25:54
(RHSA-2024:1878) Moderate: RHUI 4.8 Release - Security Updates, Bug Fixes, and Enhancements
2024-04-18 00:58:43
(RHSA-2024:2010) Important: Satellite 6.15.0 release
2024-04-23 17:00:52