GitHub Advisoryadvisory · PyPI

GHSA-652x-xj99-gmcc Exposure of Sensitive Information to an Unauthorized Actor in Requests

MEDIUM Published 2022-05-14 Modified 2024-10-21 Official page ↗
Aliases
CVE-2014-1830
Ecosystem
PyPI
Packages
requests
Severity
Moderate
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Weaknesses
CWE-200
Reviewed
2022-07-07

Affected packages

• PyPI requests: < 2.3.0 → fixed in 2.3.0

Description

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

Related

Alias · CVE (1)

  • CVE-2014-1830 Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header… vulnerability

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References