Information Exposure
Open
- Dominant language
- C#
- Stars
- 8k
- Forks
- 2.8k
- PR merge metrics
- No merged PRs in 30d
Description
Information Exposure
Vulnerable module: requests
Introduced through: requests@2.18.4
Detailed paths
Introduced through: dvf/blockchain@dvf/blockchain#1369cac2094d36e694da1209d7d4f923264f7f50 › requests@2.18.4
Remediation: Upgrade to requests@2.20.0.
Overview
Requests is a Non-GMO HTTP library for Python
Affected versions of this package are vulnerable to Information Exposure. Upon receiving a same-hostname https-to-http redirect, it sends the HTTP Authorization header to an http URI. This makes it easier for remote attackers to discover credentials by sniffing the network.
Information Exposure vulnerability report
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.