Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/01/03 1:36 p.m.152 views

httparty has multipart/form-data request tampering vulnerability

Impact I found "multipart/form-data request tampering vulnerability" caused by Content-Disposition "filename" lack of escaping in httparty. httparty/lib/httparty/request body.rb def generatemultipart...

5.3CVSS5AI score0.0129EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/01/03 1:36 p.m.34 views

GHSA-5PQ7-52MG-HR42 httparty has multipart/form-data request tampering vulnerability

Impact I found "multipart/form-data request tampering vulnerability" caused by Content-Disposition "filename" lack of escaping in httparty. httparty/lib/httparty/request body.rb def generatemultipart...

6.5CVSS5AI score0.0129EPSS
SaveExploits1References6
Rows per page
Query Builder