Lucene search
+L

151 matches found

OpenVAS
OpenVAS
•added 2022/03/23 12:00 a.m.•22 views

Fedora: Security Advisory for httpie (FEDORA-2022-fbf40ae0e4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.0165EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/03/23 12:00 a.m.•28 views

Fedora: Security Advisory for httpie (FEDORA-2022-cfcad08594)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.5CVSS6.5AI score0.0165EPSS
SaveExploits1References2
Fedora
Fedora
•added 2022/03/17 2:42 p.m.•48 views

[SECURITY] Fedora 34 Update: httpie-3.1.0-1.fc34

HTTPie is a CLI HTTP utility built out of frustration with existing tools. The goal is to make CLI interaction with HTTP-based services as human-friendly as possible. HTTPie does so by providing an http command that allows for issuing arbitrary HTTP requests using a simple and natural syntax and...

6.5CVSS6.6AI score0.0165EPSS
SaveExploits1
Veracode
Veracode
•added 2022/03/16 8:50 a.m.•26 views

Information Disclosure

httpie is vulnerable to information disclosure. The vulnerability exists due to a lack of sanitization of cookies in persistent session allowing the cookies to be visible to all sites in that session...

5.3CVSS1.4AI score0.01292EPSS
SaveExploits1References2Affected Software1
osv_ghsa
osv_ghsa
•added 2022/03/16 12:00 a.m.•31 views

GHSA-6PC9-XQRG-WFQW Exposure of Sensitive information in httpie

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0...

4.8CVSS5.2AI score0.01292EPSS
SaveExploits1References6
vulnersOsv
vulnersOsv
•added 2022/03/16 12:00 a.m.•4 views

dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2022-0430 via httpie (2.0.0)

httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2022-0430 Source advisory: OSV:GHSA-6PC9-XQRG-WFQW...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/16 12:00 a.m.•3 views

encapsia-cli (>=0.1.8, <=0.2.1), httpie-credential-store (1.0.0) +1 more potentially affected by CVE-2022-0430 via httpie (1.0.3)

httpie PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.1.8, =0.2.1 - httpie-credential-store 1.0.0 - veracode-api-signing 21.3.0 Source cves: CVE-2022-0430 Source advisory:...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/16 12:00 a.m.•4 views

navigator-api (>=1.3.21, <=1.9.24) potentially affected by CVE-2022-0430 via httpie (2.3.0)

httpie PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - navigator-api =1.3.21, =1.9.24 Source cves: CVE-2022-0430 Source advisory: OSV:GHSA-6PC9-XQRG-WFQW...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/16 12:00 a.m.•4 views

encapsia-cli (>=0.2.2, <=0.5.1), httpie-astra (>=0.0.14, <=0.1.0) +2 more potentially affected by CVE-2022-0430 via httpie (2.6.0)

httpie PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.2.2, =0.0.14, =0.1.0 - httpie-credential-store 2.0.0 - httpie-nifcloud-authv4 0.1.0 Source cves: CVE-2022-0430 Source advisory:...

5.3CVSS0.01292EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/03/16 12:00 a.m.•49 views

Exposure of Sensitive information in httpie

httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0...

5.3CVSS1.6AI score0.01292EPSS
SaveExploits1References5Affected Software1
attackerkb
attackerkb
•added 2022/03/15 3:15 p.m.•15 views

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.4AI score0.01292EPSS
SaveExploits1References3
osv_debian
osv_debian
•added 2022/03/15 3:15 p.m.•7 views

DEBIAN-CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS4.6AI score0.01292EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/03/15 3:15 p.m.•31 views

CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.9AI score0.01292EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2022/03/15 3:15 p.m.•11 views

UBUNTU-CVE-2022-0430

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS5.8AI score0.01292EPSS
SaveExploits1References4
PyPA
PyPA
•added 2022/03/15 3:15 p.m.•15 views

PYSEC-2022-167

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

5.3CVSS6.7AI score0.01292EPSS
SaveExploits1References3Affected Software1
vulnersOsv
vulnersOsv
•added 2022/03/15 3:15 p.m.•4 views

navigator-api (>=1.3.21, <=1.9.24) potentially affected by CVE-2022-0430 via httpie (2.3.0)

httpie PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - navigator-api =1.3.21, =1.9.24 Source cves: CVE-2022-0430 Source advisory: OSV:PYSEC-2022-167...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/15 3:15 p.m.•3 views

encapsia-cli (>=0.1.8, <=0.2.1), httpie-credential-store (1.0.0) +1 more potentially affected by CVE-2022-0430 via httpie (1.0.3)

httpie PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.1.8, =0.2.1 - httpie-credential-store 1.0.0 - veracode-api-signing 21.3.0 Source cves: CVE-2022-0430 Source advisory:...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/15 3:15 p.m.•2 views

dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2022-0430 via httpie (2.0.0)

httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2022-0430 Source advisory: OSV:PYSEC-2022-167...

5.3CVSS0.01292EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/03/15 3:15 p.m.•3 views

encapsia-cli (>=0.2.2, <=0.5.1), httpie-astra (>=0.0.14, <=0.1.0) +2 more potentially affected by CVE-2022-0430 via httpie (2.6.0)

httpie PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.2.2, =0.0.14, =0.1.0 - httpie-credential-store 2.0.0 - httpie-nifcloud-authv4 0.1.0 Source cves: CVE-2022-0430 Source advisory:...

5.3CVSS0.01292EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/03/15 2:20 p.m.•56 views

CVE-2022-0430 Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...

2.4CVSS5.7AI score0.01292EPSS
SaveExploits1References2
Rows per page
Query Builder