PT-2019-4690 · Python+7 · Urllib3+7
Hanno Böck
·
Publicado
2019-03-13
·
Atualizado
2024-11-20
·
CVE-2019-11236
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
urllib3 versions 1.24.1 and earlier
Description
The issue allows for CRLF injection if the attacker controls the
request parameter. This can potentially impact the confidentiality and integrity of protected information by allowing the input of invalid characters (CRLF).Recommendations
For versions 1.24.1 and earlier, as a temporary workaround, consider restricting the use of the
request parameter until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Astra Linux
Centos
Red Hat
Rocky Linux
Suse
Ubuntu
Urllib3