188 matches found
CVE-2023-43804
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a Cookie header and unknowingly leak...
CVE-2023-43804
CVE-2023-43804 affects the Python urllib3 library, where a Cookie header may be leaked across cross-origin redirects if redirects are not disabled. The issue is resolved in urllib3 1.26.17 or 2.0.5. Affected environments are confirmed in multiple reports, including AlmaLinux and Brocade advisorie...
CVE-2023-43804 `Cookie` HTTP header isn't stripped on cross-origin redirects
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the Cookie HTTP header special or provide any helpers for managing cookies over HTTP, that is the responsibility of the user. However, it is possible for a user to specify a Cookie header and unknowingly leak...
CVE-2022-43804
To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used...
Debian dla-3194 : asterisk - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3194 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3194-1 [email protected]...
[SECURITY] [DLA 2962-1] pjproject security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 28, 2022 https://wiki.debian.org/LTS -...
CVE-2021-43804
CVE-2021-43804 affects the PJPROJECT/PJSIP stack, specifically PJMEDIA/RTCP. The flaw arises when an incoming RTCP BYE message declares a reason length that isn’t checked against the actual packet size, enabling an out-of-bounds read. The documents consistently describe this as the root cause and...