Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CRLF injection in httplib2
Vulnerability Description
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as opposed to proper urllib building with escaping. This has been fixed in 0.18.0.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
Vulnerability Title
httplib2 注入漏洞
Vulnerability Description
httplib2是一款HTTP客户端库。 httplib2 0.18.0之前版本中存在注入漏洞。攻击者可通过控制的uri（httplib2.Http.request()）未转义部分利用该漏洞更改请求标头和正文，并将其他隐藏请求发送到同一服务器。
CVSS Information
N/A
Vulnerability Type
N/A