Information Disclosure

🗓️ 10 Oct 2018 02:26:19Reported by Veracode Vulnerability DatabaseType

HTTP Authorization header disclosure vulnerability due to insecure redirec

Reporter	Title	Published	Views	Family All 205
FreeBSD	www/py-requests -- Information disclosure vulnerability	27 Jun 201800:00	–	freebsd
Huntr	Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects/follow-redirects	8 Feb 202202:23	–	huntr
Huntr	Exposure of Sensitive Information to an Unauthorized Actor in node-fetch/node-fetch	12 Feb 202217:07	–	huntr
GithubExploit	Exploit for Deserialization of Untrusted Data in Pyyaml	29 Aug 202510:27	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	27 Jan 202100:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Automation is vulnerable to multiple security vulnerabilites	27 Mar 202617:49	–	ibm
Tenable Nessus	Amazon Linux 2 : python-requests (ALAS-2019-1334)	25 Oct 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : python-virtualenv (ALAS-2020-1413)	24 Apr 202000:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0103: python-pip (ALINUX3-SA-2022:0103)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : python27:2.7 (CESA-2020:1605)	1 Feb 202100:00	–	nessus

Vulners

Node

google bionicMatch9.0.1-2debian

AND

python requestsRange2.3.0–2.19.1python

Source	Link
github	www.github.com/requests/requests/pull/4718
github	www.github.com/requests/requests/commit/c45d7c49ea75133e52ab22a8e9e13173938e36ff
github	www.github.com/requests/requests/issues/4716
docs	www.docs.python-requests.org/en/master/community/updates/
bugs	www.bugs.debian.org/910766
oracle	www.oracle.com/security-alerts/cpujul2022.html
lists	www.lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.html
access	www.access.redhat.com/errata/RHSA-2019:2035
usn	www.usn.ubuntu.com/3790-1/
usn	www.usn.ubuntu.com/3790-2/

25 Jul 2022 21:05Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

EPSS0.07443