151 matches found
dalineunit (>=0.0.31, <=0.0.69), encapsia-cli (>=0.1.8, <=0.5.1) +5 more potentially affected by CVE-2022-0430 via httpie (>=1.0.3, <=2.6.0)
httpie PYPI version =1.0.3, =0.0.31, =0.1.8, =0.0.14, =1.0.0, =1.3.21, =1.9.24 - veracode-api-signing 21.3.0 Source cves: CVE-2022-0430 Source advisory: MEND:CVE-2022-0430...
CVE-2022-0430
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...
CVE-2022-0430
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...
HTTPie security vulnerability
HTTPie is a command line HTTP client. A security vulnerability exists in HTTPie before 3.1.0, which allows unauthorized participants to access sensitive information...
CVE-2022-0430: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0...
PT-2022-13179
Name of the Vulnerable Software and Affected Versions httpie versions prior to 3.1.0 Description The issue concerns exposure of sensitive information to unauthorized actors. httpie is a command-line HTTP client, and prior to version 3.1.0, all cookies saved to session storage are supercookies,...
Information Disclosure
httpie is vulnerable to information disclosure. The vulnerability exists when handling cookies because all cookies were shared across all hosts during the runtime including redirects to the 3rd party hosts which allows a malicious attacker to gain access to sensitive information...
encapsia-cli (>=0.2.2, <=0.5.1), httpie-astra (>=0.0.14, <=0.1.0) +2 more potentially affected by CVE-2022-24737 via httpie (2.6.0)
httpie PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.2.2, =0.0.14, =0.1.0 - httpie-credential-store 2.0.0 - httpie-nifcloud-authv4 0.1.0 Source cves: CVE-2022-24737 Source advisory:...
dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2022-24737 via httpie (2.0.0)
httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2022-24737 Source advisory: OSV:GHSA-9W4W-CPC8-H2FQ...
encapsia-cli (>=0.1.8, <=0.2.1), httpie-credential-store (1.0.0) +1 more potentially affected by CVE-2022-24737 via httpie (1.0.3)
httpie PYPI version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - encapsia-cli =0.1.8, =0.2.1 - httpie-credential-store 1.0.0 - veracode-api-signing 21.3.0 Source cves: CVE-2022-24737 Source advisory:...
navigator-api (>=1.3.21, <=1.9.24) potentially affected by CVE-2022-24737 via httpie (2.3.0)
httpie PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - navigator-api =1.3.21, =1.9.24 Source cves: CVE-2022-24737 Source advisory: OSV:GHSA-9W4W-CPC8-H2FQ...
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Impact HTTPie have the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. As an example, we can make an authenticated request and save it to a named session called api:...
GHSA-9W4W-CPC8-H2FQ Exposure of Sensitive Information to an Unauthorized Actor in httpie
Impact HTTPie have the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. As an example, we can make an authenticated request and save it to a named session called api:...
CVE-2022-24737
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and host...
DEBIAN-CVE-2022-24737
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and host...
CVE-2022-24737
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and host...
dalineunit (>=0.0.31, <=0.0.69) potentially affected by CVE-2022-24737 via httpie (2.0.0)
httpie PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpie and may be impacted: - dalineunit =0.0.31, =0.0.69 Source cves: CVE-2022-24737 Source advisory: OSV:PYSEC-2022-34...
CVE-2022-24737
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and host...
PYSEC-2022-34
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and...
Hardcoded credentials
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persistently store some of the state that belongs to the outgoing requests and incoming responses on the disk for further usage. Before 3.1.0, HTTPie didn‘t distinguish between cookies and host...