vulnerability
Red Hat OpenShift: CVE-2020-26137: python-urllib3: CRLF injection via HTTP request method
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:P/I:P/A:N) | Sep 30, 2020 | Jan 21, 2021 | Aug 11, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:N)
Published
Sep 30, 2020
Added
Jan 21, 2021
Modified
Aug 11, 2025
Description
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
Solution
linuxrpm-upgrade-python-urllib3
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.