GitHub Advisoryadvisory · PyPI

GHSA-xjjg-vmw6-c2p9 Open Redirect in httpie

HIGH Published 2019-08-27 Modified 2024-09-20 Official page ↗
Aliases
CVE-2019-10751
Ecosystem
PyPI
Packages
httpie
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-601
Reviewed
2019-08-27

Affected packages

• PyPI httpie: < 1.0.3 → fixed in 1.0.3

Description

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control.

Related

Alias · CVE (1)

  • CVE-2019-10751 All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References