Lucene search
+L

13 matches found

EUVD
EUVD
added 2025/11/10 5:21 p.m.6 views

EUVD-2025-48052

Malicious code in dono-gado-gado55-sukiwir npm...

6.6AI score
SaveExploits0
OSV
OSV
added 2025/09/26 11:09 a.m.5 views

OESA-2025-2356 python-httpie security update

HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/26 11:09 a.m.5 views

OESA-2025-2358 python-httpie security update

HTTPie pronounced aitch-tee-tee-pie is a command-line HTTP client. Its goal is to make CLI interaction with web services as human-friendly as possible. HTTPie is designed for testing, debugging, and generally interacting with APIs HTTP servers. The http https commands allow for creating and sendi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
Circl
Circl
added 2024/11/05 1:19 a.m.10 views

CVE-2024-48052

creationtimestamp| type| source ---|---|--- 2024-11-05 01:19:05+00:00| seen| https://t.me/cvedetector/9795...

6.5CVSS4.8AI score0.0047EPSS
SaveExploits1References1
NVD
NVD
added 2024/11/04 11:15 p.m.20 views

CVE-2024-48052

In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...

6.5CVSS0.0047EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/11/04 12:00 a.m.22 views

CVE-2024-48052

In gradio =4.42.0, the gr.DownloadButton function has a hidden server-side request forgery SSRF vulnerability. The reason is that within the saveurltocache function, there are no restrictions on the URL, which allows access to local target resources. This can lead to the download of local resourc...

0.0047EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2023/11/18 1:50 a.m.6 views

SUSE CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS6.9AI score0.00307EPSS
SaveExploits0References3
Wolfi
Wolfi
added 2023/11/16 6:15 p.m.33 views

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/11/16 6:15 p.m.5 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS5.8AI score0.00307EPSS
SaveExploits0References2
Chainguard
Chainguard
added 2023/11/16 6:15 p.m.27 views

CVE-2023-48052 vulnerabilities

Vulnerabilities for packages: httpie...

7.4CVSS6.9AI score0.00307EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2023/11/16 6:15 p.m.20 views

CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/16 6:15 p.m.15 views

UBUNTU-CVE-2023-48052

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References3
CVE
CVE
added 2023/11/16 12:00 a.m.313 views

CVE-2023-48052

CVE-2023-48052 affects HTTPie v3.2.2, where missing SSL certificate validation enables a network-based MITM, allowing eavesdropping and compromising confidentiality and integrity. CVSS v3.1 vectors reflect network access, high impact on confidentiality and integrity, and no user interaction requi...

7.4CVSS7.1AI score0.00307EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder