Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NHttpie
APPHttpie3.2.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2019-10751HIGH8.8ten sam produkt
All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attac...
CVE-2022-0430MEDIUM5.3ten sam produkt
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.
CVE-2022-24737MEDIUM6.5ten sam produkt
HTTPie is a command-line HTTP client. HTTPie has the practical concept of sessions, which help users to persis...