PT-2019-20149 · Python · Urllib3

Publicado 2019-04-15 · Atualizado 2019-04-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions urllib3 versions prior to 1.24.2

Description The issue allows for CRLF injection if the attacker controls the request parameter.

Recommendations For versions prior to 1.24.2, update to version 1.24.2 or later to resolve the issue.

Identificadores relacionados

PYSEC-2019-62

Produtos afetados

Urllib3

Referências · 14

• https://github.com/urllib3/urllib3/issues/1553 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/TBI45HO533KYHNB5YRO43TBYKA3E3VRL · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/R62XGEYPUTXMRHGX5I37EBCGQ5COHGKR · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NKGPJLVLVYCL4L4B4G5TIOTVK4BKPG72 · Aviso do Fabricante
• https://usn.ubuntu.com/3990-2 · Nota
• https://access.redhat.com/errata/RHSA-2019:3335 · Nota
• https://usn.ubuntu.com/3990-1 · Nota
• https://lists.debian.org/debian-lts-announce/2019/06/msg00016.html · Nota
• https://access.redhat.com/errata/RHSA-2019:2272 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00041.html · Nota
• https://osv.dev/vulnerability/PYSEC-2019-62 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/XOSA2NT4DUQDBEIWE6O7KKD24XND7TE2 · Aviso do Fabricante
• http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00039.html · Nota
• https://access.redhat.com/errata/RHSA-2019:3590 · Nota