Lucene search
PhotonPHSA-2023-5.0-0155HistoryNov 25, 2023 - 12:00 a.m.
Important Photon OS Security Update - PHSA-2023-5.0-0155
2023-11-2500:00:00
github.com
5
photon os
security update
python3-urllib3
unix
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.001
Percentile
43.4%
Updates of [‘python3-urllib3’] packages of Photon OS have been released.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Photon | 5.0 | noarch | python3-urllib3 | < 1.25.11-4.ph5 | python3-urllib3-1.25.11-4.ph5.noarch.rpm |
Related
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0519
2023-11-23 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0687
2023-11-15 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0143
2023-11-15 00:00:00
nessus
nessus
Photon OS 5.0: Python3 PHSA-2023-5.0-0155
2024-07-24 00:00:00
CentOS 8 : python3.11-urllib3 (CESA-2024:2986)
2024-05-22 00:00:00
RHEL 9 : python3.11-urllib3 (RHSA-2024:2159)
2024-04-30 00:00:00
osv
osv
`Cookie` HTTP header isn't stripped on cross-origin redirects
2023-10-02 23:27:05
CGA-mqx7-jxgh-vrfr
2024-06-06 12:28:34
CGA-7c9w-c64m-rwq2
2024-06-06 12:24:55
prion
prion
Information disclosure
2023-10-04 17:15:00
Authentication flaw
2023-11-14 21:15:00
openvas
openvas
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2023-3315)
2023-12-12 00:00:00
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2024-1046)
2024-01-05 00:00:00
Huawei EulerOS: Security Advisory for python-urllib3 (EulerOS-SA-2023-3348)
2023-12-12 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in urllib3-1.26.16-py2.py3-none-any.whl
2024-03-28 11:47:35
redhat
redhat
(RHSA-2024:2159) Moderate: python3.11-urllib3 security update
2024-04-30 06:14:54
(RHSA-2024:0187) Moderate: Red Hat OpenStack Platform 17.1 (python-urllib3) security update
2024-01-16 14:14:01
(RHSA-2024:2986) Moderate: python3.11-urllib3 security update
2024-05-22 06:35:16
github
github
`Cookie` HTTP header isn't stripped on cross-origin redirects
2023-10-02 23:27:05
oraclelinux
oraclelinux
python3.11-urllib3 security update
2024-05-02 00:00:00
python3.11-urllib3 security update
2024-05-23 00:00:00
fence-agents security update
2023-12-18 00:00:00
cbl_mariner
cbl_mariner
debiancve
debiancve
CVE-2023-43804
2023-10-04 17:15:10
almalinux
almalinux
Moderate: python3.11-urllib3 security update
2024-05-22 00:00:00
Moderate: python3.11-urllib3 security update
2024-04-30 00:00:00
Moderate: python-urllib3 security update
2024-01-25 00:00:00
cve
cve
CVE-2023-43804
2023-10-04 17:15:10
CVE-2023-34060
2023-11-14 21:15:09
rocky
rocky
python3.11-urllib3 security update
2024-06-14 13:59:30
f5
f5
K000138600 : Python vulnerability CVE-2023-43804
2024-02-13 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python-urllib3-1.26.17-1.fc38
2023-10-11 01:37:16
[SECURITY] Fedora 37 Update: python-urllib3-1.26.17-1.fc37
2023-10-13 01:33:52
[SECURITY] Fedora 39 Update: python-urllib3-1.26.18-1.fc39
2023-11-03 19:01:21
veracode
veracode
Information Disclosure
2023-10-06 12:09:49
alpinelinux
alpinelinux
CVE-2023-43804
2023-10-04 17:15:10
ubuntucve
ubuntucve
CVE-2023-43804
2023-10-04 00:00:00
redhatcve
redhatcve
CVE-2023-43804
2023-10-10 04:25:25
nvd
nvd
CVE-2023-43804
2023-10-04 17:15:10
CVE-2023-34060
2023-11-14 21:15:09
githubexploit
githubexploit
redos
redos
ROS-20240405-02
2024-04-05 00:00:00
cgr
cgr
CVE-2023-43804 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2023-43804 `Cookie` HTTP header isn't stripped on cross-origin redirects
2023-10-04 16:01:50
CVE-2023-34060
2023-11-14 20:20:51
wolfi
wolfi
CVE-2023-43804 vulnerabilities
2024-10-01 09:27:37
zdt
zdt
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
aix
aix
AIX is affected by multiple vulnerabilities due to Python
2023-12-21 08:42:03
vmware
vmware
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
ubuntu
ubuntu
pip vulnerabilities
2023-11-15 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
10
Confidence
High
EPSS
0.001
Percentile
43.4%
Related for PHSA-2023-5.0-0155