vulnerability

VMware Photon OS: CVE-2020-26137

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
6	(AV:N/AC:L/Au:N/C:P/I:P/A:N)	09/29/2020	01/20/2025	02/04/2025

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:N)

Published

09/29/2020

Added

01/20/2025

Modified

02/04/2025

Description

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

Solution

vmware-photon_os_update_tdnf

References

CVE-2020-26137
https://attackerkb.com/topics/CVE-2020-26137

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today