Security Advisory

CVE-2020-26137

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-09-29 00:00:00

Last updated 2024-08-04 15:49:07

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.

← Browse all CVEs View on cve.org ↗