p PatchFirst

CVE-2014-1829

CVE-2014-1829

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

CVSS 5.3 · Medium · EPSS 2.2% · Fix available

Published
Updated

Stack: system · python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • requests Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.3.0-1

    Update to 2.3.0-1

  • requests Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.3.0-1

    Update to 2.3.0-1

  • requests Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.3.0-1

    Update to 2.3.0-1

  • requests PyPI

    Versions
    • 0.0.1
    • 0.10.0
    • 0.10.1
    • 0.10.2
    • 0.10.3
    • 0.10.4
    • 0.10.6
    • 0.10.7
    • 0.10.8
    • 0.11.1
    • 0.11.2
    • 0.12.0
    • 0.12.01
    • 0.12.1
    • 0.13.0
    • 0.13.1
    • 0.13.2
    • 0.13.3
    • 0.13.4
    • 0.13.5
    • 0.13.6
    • 0.13.7
    • 0.13.8
    • 0.13.9
    • 0.14.0
    • 0.14.1
    • 0.14.2
    • 0.2.0
    • 0.2.1
    • 0.2.2
    • 0.2.3
    • 0.2.4
    • 0.3.0
    • 0.3.1
    • 0.3.2
    • 0.3.3
    • 0.3.4
    • 0.4.0
    • 0.4.1
    • 0.5.0
    • 0.5.1
    • 0.6.0
    • 0.6.1
    • 0.6.2
    • 0.6.3
    • 0.6.4
    • 0.6.5
    • 0.6.6
    • 0.7.0
    • 0.7.1
    • 0.7.2
    • 0.7.3
    • 0.7.4
    • 0.7.5
    • 0.7.6
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.8.3
    • 0.8.4
    • 0.8.5
    • 0.8.6
    • 0.8.7
    • 0.8.8
    • 0.8.9
    • 0.9.0
    • 0.9.1
    • 0.9.2
    • 0.9.3
    • 1.0.0
    • 1.0.1
    • 1.0.2
    • 1.0.3
    • 1.0.4
    • 1.1.0
    • 1.2.0
    • 1.2.1
    • 1.2.2
    • 1.2.3
    • 2.0.0
    • 2.0.1
    • 2.1.0
    • 2.2.0
    • 2.2.1
    Affected ranges
    • ECOSYSTEM: < 2.3.0

    Update to 2.3.0

  • requests Ubuntu:14.04:LTS

    Versions
    • 1.2.3-1
    • 2.0.0-1
    • 2.2.1-1
    Affected ranges
    • ECOSYSTEM: < 2.2.1-1ubuntu0.1

    Update to 2.2.1-1ubuntu0.1

Original sources

Check your server →