2 matches found
SUSE-SU-2025:20531-1 Security update for python-requests
This update for python-requests fixes the following issues: - Avoid problems with certificate caching in sslcontext. bsc1246104, ghpsf/requests6767 Update to 2.32.4: CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong...
5.3CVSS6.5AI score0.00845EPSS
SaveExploits1References4
Arbitrary File Access
When told to follow a "redirect" automatically, libcurl does not question the new target URL but follows it to any new URL that it understands. As libcurl supports FILE:// URLs, a rogue server can thus "trick" a libcurl-using application to read a local file instead of the remote one. This is a...
6.8CVSS7.2AI score0.0905EPSS
SaveExploits3Affected Software2
20