Exposure of Sensitive information in httpie
httpie is a modern, user-friendly command-line HTTP client for the API era. Prior to version 3.1.0, all cookies saved to session storage are supercookies. At this time, there is no known workaround. Users are recommended to update to version 3.1.0.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-0430US | medium5.3 | — | ||
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/advisories/GHSA-6pc9-xqrg-wfqwADVISORY
- https://github.com/httpie/httpiePACKAGE
- https://github.com/httpie/httpie/commit/65ab7d5caaaf2f95e61f9dd65441801c2ddee38bWEB
- https://github.com/pypa/advisory-database/tree/main/vulns/httpie/PYSEC-2022-167.yamlWEB
- https://huntr.dev/bounties/dafb2e4f-c6b6-4768-8ef5-b396cd6a801fWEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-0430ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan