CVE-2023-45803
CVSS 3.1 Score 4.2 of 10 (medium)
Details
Summary
CVE-2023-45803 is a vulnerability in urllib3, a Python HTTP client library. The vulnerability occurs when an HTTP redirect response (status 301, 302, or 303) changes the request method from one that can accept a request body to `GET`, but urllib3 does not remove the request body. This behavior is not specified in the section for redirects, but it has been observed in other major HTTP client implementations. To be affected by this vulnerability, the organization must be using urllib3 and have sensitive data in the HTTP request bodies. The exploitability of this vulnerability is considered low as it requires a previously trusted service to be compromised. However, if exploited, it can pose a potential danger to the confidentiality of an organization's data. The vulnerability has a base severity rating of MEDIUM and requires HIGH privileges to exploit.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions