CVE-2024-47081mediumCWE-522

CVE-2024-47081: fallo de gravedad media en psf requests

Requests vulnerable to .netrc credentials leak via malicious URLs

Publicada el

Seguir esta CVE+ Monitorear requests+ Monitorear requests

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 1.0%
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Productos afectados
psf · requests
CVEs relacionadas — psf requests

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-32681MEDIUMUnintended leak of Proxy-Authorization header in requestsEPSS 3.0%CVE-2024-35195MEDIUMRequests `Session` object does not verify requests after making first request with verify=FalseEPSS 0.3%CVE-2026-25645MEDIUMRequests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionEPSS 0.2%