PT-2023-3599 · Pypi+11 · Requests+11
Smashits
+1
·
Published
2023-05-22
·
Updated
2026-05-04
·
CVE-2023-32681
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Requests versions 2.3.0 through 2.30.0
Description
The issue is related to the leaking of Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This occurs due to how the
rebuild proxies function is used to reattach the Proxy-Authorization header to requests. For HTTP connections sent through the tunnel, the proxy identifies the header in the request itself and removes it prior to forwarding to the destination server. However, when sent over HTTPS, the Proxy-Authorization header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information.Recommendations
For versions 2.3.0 through 2.30.0, update to version 2.31.0 to resolve the issue.
As a temporary workaround for users who are not able to update Requests immediately, consider disabling redirects by setting
allow redirects to False on all calls through Requests top-level APIs. Note that if you're currently relying on redirect behaviors, you will need to capture the 3xx response codes and ensure a new request is made to the redirect destination.Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Debian
Linuxmint
Red Hat
Red Os
Requests
Rocky Linux
Suse
Ubuntu