CVE-2023-45803

CVSS 3.1 Score 4.2 of 10 (medium)

Details

Published Oct 17, 2023
Updated: Nov 3, 2023
CWE ID 200

Summary

CVE-2023-45803 is a vulnerability in urllib3, a Python HTTP client library. The vulnerability occurs when an HTTP redirect response (status 301, 302, or 303) changes the request method from one that can accept a request body to GET, but urllib3 does not remove the request body. This behavior is not specified in the section for redirects, but it has been observed in other major HTTP client implementations. To be affected by this vulnerability, the organization must be using urllib3 and have sensitive data in the HTTP request bodies. The exploitability of this vulnerability is considered low as it requires a previously trusted service to be compromised. However, if exploited, it can pose a potential danger to the confidentiality of an organization's data. The vulnerability has a base severity rating of MEDIUM and requires HIGH privileges to exploit.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-45803 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options