In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python-psycopg2-docalma-upgrade-python2-attrsalma-upgrade-python2-chardetalma-upgrade-python2-coveragealma-upgrade-python2-cythonalma-upgrade-python2-dnsalma-upgrade-python2-docsalma-upgrade-python2-docs-infoalma-upgrade-python2-docutilsalma-upgrade-python2-funcsigsalma-upgrade-python2-idnaalma-upgrade-python2-ipaddressalma-upgrade-python2-markupsafealma-upgrade-python2-mockalma-upgrade-python2-pluggyalma-upgrade-python2-psycopg2alma-upgrade-python2-psycopg2-debugalma-upgrade-python2-psycopg2-testsalma-upgrade-python2-pyalma-upgrade-python2-pymysqlalma-upgrade-python2-pysocksalma-upgrade-python2-pytestalma-upgrade-python2-pytest-mockalma-upgrade-python2-pytzalma-upgrade-python2-pyyamlalma-upgrade-python2-requestsalma-upgrade-python2-rpm-macrosalma-upgrade-python2-setuptools_scm | May 4, 2022 | Apr 15, 2019 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-python-virtualenvamazon-linux-ami-2-upgrade-python2-pipamazon-linux-ami-2-upgrade-python3-pip | Apr 27, 2020 | Apr 15, 2019 | |
| Amazon_linux | — | amazon-linux-upgrade-python-pipamazon-linux-upgrade-python-urllib3 | Jul 27, 2019 | Apr 15, 2019 |
| Centos_linux | — | centos-upgrade-babelcentos-upgrade-cython-debugsourcecentos-upgrade-numpy-debugsourcecentos-upgrade-platform-python-pipcentos-upgrade-python-coverage-debugsourcecentos-upgrade-python-lxml-debugsourcecentos-upgrade-python-nose-docscentos-upgrade-python-psycopg2-debuginfocentos-upgrade-python-psycopg2-debugsourcecentos-upgrade-python-psycopg2-doccentos-upgrade-python-pymongo-debuginfocentos-upgrade-python-pymongo-debugsourcecentos-upgrade-python-sqlalchemy-doccentos-upgrade-python-urllib3centos-upgrade-python-virtualenvcentos-upgrade-python2centos-upgrade-python2-attrscentos-upgrade-python2-babelcentos-upgrade-python2-backportscentos-upgrade-python2-backports-ssl_match_hostnamecentos-upgrade-python2-bsoncentos-upgrade-python2-bson-debuginfocentos-upgrade-python2-chardetcentos-upgrade-python2-coveragecentos-upgrade-python2-coverage-debuginfocentos-upgrade-python2-cythoncentos-upgrade-python2-cython-debuginfocentos-upgrade-python2-debugcentos-upgrade-python2-debuginfocentos-upgrade-python2-debugsourcecentos-upgrade-python2-develcentos-upgrade-python2-dnscentos-upgrade-python2-docscentos-upgrade-python2-docs-infocentos-upgrade-python2-docutilscentos-upgrade-python2-funcsigscentos-upgrade-python2-idnacentos-upgrade-python2-ipaddresscentos-upgrade-python2-jinja2centos-upgrade-python2-libscentos-upgrade-python2-lxmlcentos-upgrade-python2-lxml-debuginfocentos-upgrade-python2-markupsafecentos-upgrade-python2-mockcentos-upgrade-python2-nosecentos-upgrade-python2-numpycentos-upgrade-python2-numpy-debuginfocentos-upgrade-python2-numpy-doccentos-upgrade-python2-numpy-f2pycentos-upgrade-python2-pipcentos-upgrade-python2-pip-wheelcentos-upgrade-python2-pluggycentos-upgrade-python2-psycopg2centos-upgrade-python2-psycopg2-debugcentos-upgrade-python2-psycopg2-debug-debuginfocentos-upgrade-python2-psycopg2-debuginfocentos-upgrade-python2-psycopg2-testscentos-upgrade-python2-pycentos-upgrade-python2-pygmentscentos-upgrade-python2-pymongocentos-upgrade-python2-pymongo-debuginfocentos-upgrade-python2-pymongo-gridfscentos-upgrade-python2-pymysqlcentos-upgrade-python2-pysockscentos-upgrade-python2-pytestcentos-upgrade-python2-pytest-mockcentos-upgrade-python2-pytzcentos-upgrade-python2-pyyamlcentos-upgrade-python2-pyyaml-debuginfocentos-upgrade-python2-requestscentos-upgrade-python2-rpm-macroscentos-upgrade-python2-scipycentos-upgrade-python2-scipy-debuginfocentos-upgrade-python2-setuptoolscentos-upgrade-python2-setuptools-wheelcentos-upgrade-python2-setuptools_scmcentos-upgrade-python2-sixcentos-upgrade-python2-sqlalchemycentos-upgrade-python2-testcentos-upgrade-python2-tkintercentos-upgrade-python2-toolscentos-upgrade-python2-urllib3centos-upgrade-python2-virtualenvcentos-upgrade-python2-wheelcentos-upgrade-python2-wheel-wheelcentos-upgrade-python3-pipcentos-upgrade-python3-pip-wheelcentos-upgrade-python3-urllib3centos-upgrade-pyyaml-debugsourcecentos-upgrade-scipy-debugsource | Aug 28, 2019 | Apr 15, 2019 |
| Debian | debian-upgrade-python-urllib3 | Jun 21, 2019 | Apr 15, 2019 | |
| Freebsd | freebsd-upgrade-package-py27-urllib3freebsd-upgrade-package-py35-urllib3freebsd-upgrade-package-py36-urllib3freebsd-upgrade-package-py37-urllib3freebsd-upgrade-package-py38-urllib3 | Nov 27, 2019 | Nov 26, 2019 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-python-urllib3 | Jun 17, 2020 | Apr 15, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-python-urllib3 | Nov 19, 2019 | Apr 15, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-python-urllib3 | Nov 19, 2019 | Apr 15, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python2-urllib3huawei-euleros-2_0_sp8-upgrade-python3-urllib3 | Feb 26, 2020 | Apr 15, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-python-jinja2-2-10-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-jinja2-27-2-10-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-jinja2-34-2-10-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-jinja2-35-2-10-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-lxml-27-4-3-3-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-lxml-34-4-3-3-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-lxml-35-4-3-3-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-lxml-4-3-3-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-paramiko-2-0-9-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-paramiko-27-2-0-9-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-paramiko-34-2-0-9-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-paramiko-35-2-0-9-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-urllib3-1-25-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-urllib3-27-1-25-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-urllib3-34-1-25-1-11-4-11-0-1-3-0oracle-solaris-11-4-upgrade-library-python-urllib3-35-1-25-1-11-4-11-0-1-3-0 | Jul 17, 2019 | Apr 15, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-babeloracle-linux-upgrade-platform-python-piporacle-linux-upgrade-python2oracle-linux-upgrade-python2-attrsoracle-linux-upgrade-python2-babeloracle-linux-upgrade-python2-backportsoracle-linux-upgrade-python2-backports-ssl-match-hostnameoracle-linux-upgrade-python2-bsonoracle-linux-upgrade-python2-chardetoracle-linux-upgrade-python2-coverageoracle-linux-upgrade-python2-cythonoracle-linux-upgrade-python2-debugoracle-linux-upgrade-python2-develoracle-linux-upgrade-python2-dnsoracle-linux-upgrade-python2-docsoracle-linux-upgrade-python2-docs-infooracle-linux-upgrade-python2-docutilsoracle-linux-upgrade-python2-funcsigsoracle-linux-upgrade-python2-idnaoracle-linux-upgrade-python2-ipaddressoracle-linux-upgrade-python2-jinja2oracle-linux-upgrade-python2-libsoracle-linux-upgrade-python2-lxmloracle-linux-upgrade-python2-markupsafeoracle-linux-upgrade-python2-mockoracle-linux-upgrade-python2-noseoracle-linux-upgrade-python2-numpyoracle-linux-upgrade-python2-numpy-docoracle-linux-upgrade-python2-numpy-f2pyoracle-linux-upgrade-python2-piporacle-linux-upgrade-python2-pip-wheeloracle-linux-upgrade-python2-pluggyoracle-linux-upgrade-python2-psycopg2oracle-linux-upgrade-python2-psycopg2-debugoracle-linux-upgrade-python2-psycopg2-testsoracle-linux-upgrade-python2-pyoracle-linux-upgrade-python2-pygmentsoracle-linux-upgrade-python2-pymongooracle-linux-upgrade-python2-pymongo-gridfsoracle-linux-upgrade-python2-pymysqloracle-linux-upgrade-python2-pysocksoracle-linux-upgrade-python2-pytestoracle-linux-upgrade-python2-pytest-mockoracle-linux-upgrade-python2-pytzoracle-linux-upgrade-python2-pyyamloracle-linux-upgrade-python2-requestsoracle-linux-upgrade-python2-rpm-macrosoracle-linux-upgrade-python2-scipyoracle-linux-upgrade-python2-setuptoolsoracle-linux-upgrade-python2-setuptools-scmoracle-linux-upgrade-python2-setuptools-wheeloracle-linux-upgrade-python2-sixoracle-linux-upgrade-python2-sqlalchemyoracle-linux-upgrade-python2-testoracle-linux-upgrade-python2-tkinteroracle-linux-upgrade-python2-toolsoracle-linux-upgrade-python2-urllib3oracle-linux-upgrade-python2-virtualenvoracle-linux-upgrade-python2-wheeloracle-linux-upgrade-python2-wheel-wheeloracle-linux-upgrade-python3-piporacle-linux-upgrade-python3-pip-wheeloracle-linux-upgrade-python-nose-docsoracle-linux-upgrade-python-psycopg2-docoracle-linux-upgrade-python-sqlalchemy-docoracle-linux-upgrade-python-urllib3oracle-linux-upgrade-python-virtualenv | Aug 20, 2019 | Mar 13, 2019 |
| Redhat Openshift | linuxrpm-upgrade-python-urllib3 | Dec 29, 2020 | Apr 15, 2019 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-babelredhat-upgrade-cython-debugsourceredhat-upgrade-numpy-debugsourceredhat-upgrade-platform-python-pipredhat-upgrade-python-coverage-debugsourceredhat-upgrade-python-lxml-debugsourceredhat-upgrade-python-nose-docsredhat-upgrade-python-psycopg2-debuginforedhat-upgrade-python-psycopg2-debugsourceredhat-upgrade-python-psycopg2-docredhat-upgrade-python-pymongo-debuginforedhat-upgrade-python-pymongo-debugsourceredhat-upgrade-python-sqlalchemy-docredhat-upgrade-python-urllib3redhat-upgrade-python-virtualenvredhat-upgrade-python2redhat-upgrade-python2-attrsredhat-upgrade-python2-babelredhat-upgrade-python2-backportsredhat-upgrade-python2-backports-ssl_match_hostnameredhat-upgrade-python2-bsonredhat-upgrade-python2-bson-debuginforedhat-upgrade-python2-chardetredhat-upgrade-python2-coverageredhat-upgrade-python2-coverage-debuginforedhat-upgrade-python2-cythonredhat-upgrade-python2-cython-debuginforedhat-upgrade-python2-debugredhat-upgrade-python2-debuginforedhat-upgrade-python2-debugsourceredhat-upgrade-python2-develredhat-upgrade-python2-dnsredhat-upgrade-python2-docsredhat-upgrade-python2-docs-inforedhat-upgrade-python2-docutilsredhat-upgrade-python2-funcsigsredhat-upgrade-python2-idnaredhat-upgrade-python2-ipaddressredhat-upgrade-python2-jinja2redhat-upgrade-python2-libsredhat-upgrade-python2-lxmlredhat-upgrade-python2-lxml-debuginforedhat-upgrade-python2-markupsaferedhat-upgrade-python2-mockredhat-upgrade-python2-noseredhat-upgrade-python2-numpyredhat-upgrade-python2-numpy-debuginforedhat-upgrade-python2-numpy-docredhat-upgrade-python2-numpy-f2pyredhat-upgrade-python2-pipredhat-upgrade-python2-pip-wheelredhat-upgrade-python2-pluggyredhat-upgrade-python2-psycopg2redhat-upgrade-python2-psycopg2-debugredhat-upgrade-python2-psycopg2-debug-debuginforedhat-upgrade-python2-psycopg2-debuginforedhat-upgrade-python2-psycopg2-testsredhat-upgrade-python2-pyredhat-upgrade-python2-pygmentsredhat-upgrade-python2-pymongoredhat-upgrade-python2-pymongo-debuginforedhat-upgrade-python2-pymongo-gridfsredhat-upgrade-python2-pymysqlredhat-upgrade-python2-pysocksredhat-upgrade-python2-pytestredhat-upgrade-python2-pytest-mockredhat-upgrade-python2-pytzredhat-upgrade-python2-pyyamlredhat-upgrade-python2-pyyaml-debuginforedhat-upgrade-python2-requestsredhat-upgrade-python2-rpm-macrosredhat-upgrade-python2-scipyredhat-upgrade-python2-scipy-debuginforedhat-upgrade-python2-setuptoolsredhat-upgrade-python2-setuptools-wheelredhat-upgrade-python2-setuptools_scmredhat-upgrade-python2-sixredhat-upgrade-python2-sqlalchemyredhat-upgrade-python2-testredhat-upgrade-python2-tkinterredhat-upgrade-python2-toolsredhat-upgrade-python2-urllib3redhat-upgrade-python2-virtualenvredhat-upgrade-python2-wheelredhat-upgrade-python2-wheel-wheelredhat-upgrade-python3-pipredhat-upgrade-python3-pip-wheelredhat-upgrade-python3-urllib3redhat-upgrade-pyyaml-debugsourceredhat-upgrade-scipy-debugsource | Aug 7, 2019 | Apr 15, 2019 | |
| Rocky_linux | rocky-upgrade-cython-debugsourcerocky-upgrade-python-coverage-debugsourcerocky-upgrade-python-psycopg2-debuginforocky-upgrade-python-psycopg2-debugsourcerocky-upgrade-python-psycopg2-docrocky-upgrade-python-pymongo-debuginforocky-upgrade-python-pymongo-debugsourcerocky-upgrade-python2-bsonrocky-upgrade-python2-bson-debuginforocky-upgrade-python2-coveragerocky-upgrade-python2-coverage-debuginforocky-upgrade-python2-cythonrocky-upgrade-python2-cython-debuginforocky-upgrade-python2-markupsaferocky-upgrade-python2-psycopg2rocky-upgrade-python2-psycopg2-debugrocky-upgrade-python2-psycopg2-debug-debuginforocky-upgrade-python2-psycopg2-debuginforocky-upgrade-python2-psycopg2-testsrocky-upgrade-python2-pymongorocky-upgrade-python2-pymongo-debuginforocky-upgrade-python2-pymongo-gridfsrocky-upgrade-python2-pyyamlrocky-upgrade-python2-pyyaml-debuginforocky-upgrade-python2-scipyrocky-upgrade-python2-scipy-debuginforocky-upgrade-pyyaml-debugsourcerocky-upgrade-scipy-debugsource | Mar 12, 2024 | Apr 15, 2019 | |
| Suse | — | suse-upgrade-python-urllib3suse-upgrade-python2-urllib3suse-upgrade-python2-urllib3-testsuse-upgrade-python3-urllib3suse-upgrade-python3-urllib3-test | Sep 17, 2019 | Apr 15, 2019 |
| Ubuntu | ubuntu-pro-upgrade-python-urllib3ubuntu-pro-upgrade-python3-urllib3ubuntu-upgrade-python-urllib3ubuntu-upgrade-python3-urllib3 | May 22, 2019 | Apr 15, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub