Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Information Disclosure

🗓️ 19 Oct 2023 07:19:20Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 35 Views

urllib3 Information Disclosure Vulnerability due to HTTP Redirec

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite - IoT uses multiple third party dependencies which is vulnerable to CVEs.
7 Apr 202519:17
–ibm
IBM Security Bulletins		Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from go-yaml, OpenSSL, GnuTLS , OpenTelemetry-Go, go-toolset and urllib3
30 Jan 202408:15
–ibm
IBM Security Bulletins		Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs
31 Jan 202402:01
–ibm
IBM Security Bulletins		Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities
30 Aug 202413:25
–ibm
IBM Security Bulletins		Security Bulletin: AIX is affected by information disclosure (CVE-2023-45803) and arbitrary code execution (CVE-2024-6345) due to Python
12 Aug 202422:04
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
15 Apr 202503:04
–ibm
IBM Security Bulletins		Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs
31 Jan 202402:03
–ibm
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite - Predict Component uses urllib3-1.26.16-py2.py3-none-any.whl which is vulnerable to CVE-2023-45803 This bulletin contains information regarding the vulnerability and its fixture.
4 Mar 202407:24
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in containers of IBM Workload Scheduler component of IBM Workload Automation
26 Feb 202509:23
–ibm
IBM Security Bulletins		Security Bulletin: Mutiple vulnerabilites in Python affect IBM Robotic Process Automation
2 Dec 202416:08
–ibm
Rows per page
Vulners
Node
py3-urllib3py3-urllib3Match1.26.8-r0python
AND
py3-urllib3py3-urllib3Match1.26.14-r0python
AND
py3-urllib3py3-urllib3Match1.26.10-r0python
AND
py3-urllib3py3-urllib3Match1.26.4-r1python
AND
py3-urllib3py3-urllib3Match1.26.9-r0python
AND
py3-urllib3py3-urllib3Match1.26.17-r0python
AND
py3-urllib3py3-urllib3Match1.25.9-r0python
AND
py3-urllib3py3-urllib3Match1.26.7-r1python
AND
py3-urllib3py3-urllib3Match1.25.8-r0python
AND
py3-urllib3py3-urllib3Match1.26.3-r0python
AND
py3-urllib3py3-urllib3Match1.26.16-r0python
AND
py3-urllib3py3-urllib3Match1.26.15-r2python
AND
py3-urllib3py3-urllib3Match1.26.5-r0python
AND
py3-urllib3py3-urllib3Match1.26.12-r0python
AND
py3-urllib3py3-urllib3Match1.26.11-r0python
AND
py3-urllib3py3-urllib3Match1.26.15-r1python
AND
py3-urllib3py3-urllib3Match1.26.13-r0python
AND
py3-urllib3py3-urllib3Match1.26.6-r0python
AND
py3-urllib3py3-urllib3Match1.26.12-r1python
AND
py3-urllib3py3-urllib3Match1.26.4-r0python
AND
py3-urllib3py3-urllib3Match1.26.7-r0python
AND
py3-urllib3py3-urllib3Match1.26.15-r0python
AND
alpinelinuxalpine_linuxMatchedge
OR
py3-urllib3py3-urllib3Match1.26.17-r0python
AND
py3-urllib3py3-urllib3Match1.26.12-r0python
AND
alpinelinuxalpine_linuxMatch3.17
OR
py3-urllib3py3-urllib3Match1.26.17-r0python
AND
py3-urllib3py3-urllib3Match1.26.7-r0python
AND
alpinelinuxalpine_linuxMatch3.15
OR
py3-urllib3py3-urllib3Match1.26.17-r0python
AND
py3-urllib3py3-urllib3Match1.26.9-r0python
AND
alpinelinuxalpine_linuxMatch3.16
OR
py3-urllib3py3-urllib3Match1.26.17-r0python
AND
py3-urllib3py3-urllib3Match1.26.15-r1python
AND
alpinelinuxalpine_linuxMatch3.18
OR
pythonurllib3Range2.0.0a1–2.0.6python
OR
pythonurllib3Range0.2–1.26.17python
SourceLink
githubwww.github.com/urllib3/urllib3/commit/b594c5ceaca38e1ac215f916538fb128e3526a36
githubwww.github.com/urllib3/urllib3/releases/tag/1.26.18
githubwww.github.com/urllib3/urllib3/commit/4e50fbc5db74e32cabd5ccc1ab81fc103adfe0b3
githubwww.github.com/urllib3/urllib3/releases/tag/2.0.7
githubwww.github.com/advisories/GHSA-g4mx-q9vg-27p4
githubwww.github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9
githubwww.github.com/urllib3/urllib3/security/advisories/GHSA-g4mx-q9vg-27p4
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/4R2Y5XK3WALSR3FNAGN7JBYV2B343ZKB/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/5F5CUBAN5XMEBVBZPHFITBLMJV5FIJJ5/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/PPDPLM6UUMN55ESPQWJFLLIZY4ZKCNRX/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
13 Feb 2025 19:33Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.14.2
EPSS0.00056
SSVC
urllib3information disclosurevulnerabilityhttp redirectpost requestsensitive informationexploit
35