PT-2020-19717 · Sebastian Ramirez · Uvicorn

Everardo Padilla Saca · Published 2020-07-27 · Updated 2021-07-21 · CVE-2020-7694

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions uvicorn (affected versions not specified)

Description The request logger in uvicorn is susceptible to ANSI escape sequence injection. When the package logs HTTP request details to the console or a log file, it can process crafted URLs with percent-encoded escape sequences, converting them into their single-character equivalent. This can have special meaning in terminal emulators, allowing attackers to pollute access logs and potentially interact with the terminal emulator displaying the logs. Attackers can exploit this by requesting URLs with crafted paths.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-94

CWE-116

Related Identifiers

CVE-2020-7694

GHSA-33C7-2MPW-HG34

PYSEC-2020-150

SNYK-PYTHON-UVICORN-575560

Affected Products

Uvicorn

References · 15

• 🔥 https://snyk.io/vuln/SNYK-PYTHON-UVICORN-575560 · Exploit
• https://cve.org/CVERecord?id=CVE-2020-7694 · Security Note
• https://ubuntu.com/security/CVE-2020-7694 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7694 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2020-150 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-33c7-2mpw-hg34 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7694 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-7694 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-7694 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-7694 · Vendor Advisory
• https://github.com/encode/uvicorn · Note
• https://github.com/encode/uvicorn/commit/895807f94ea9a8e588605c12076b7d7517cda503 · Note
• https://github.com/encode/uvicorn/issues/723 · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/uvicorn/PYSEC-2020-150.yaml · Note
• https://github.com/advisories/GHSA-33c7-2mpw-hg34 · Note