CVE-2024-47081mediumCWE-522

CVE-2024-47081: falha de média gravidade em psf requests

Requests vulnerable to .netrc credentials leak via malicious URLs

Publicada em

Seguir esta CVE+ Monitorar requests+ Monitorar requests

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 1.0%
Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
psf · requests
CVEs relacionadas — psf requests

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32681MEDIUMUnintended leak of Proxy-Authorization header in requestsEPSS 3.0%CVE-2024-35195MEDIUMRequests `Session` object does not verify requests after making first request with verify=FalseEPSS 0.3%CVE-2026-25645MEDIUMRequests has Insecure Temp File Reuse in its extract_zipped_paths() utility functionEPSS 0.2%