CVE-2021-41945 Information

Description

Encode OSS httpx < 0.23.0 is affected by improper input validation in httpx.URL httpx.Client and some functions using httpx.URL.copy_with.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Reference

https://github.com/encode/httpx https://github.com/encode/httpx/discussions/1831 https://gist.github.com/lebr0nli/4edb76bbd3b5ff993cf44f2fbce5e571 http://encode.com https://github.com/encode/httpx/issues/2184 https://github.com/encode/httpx/releases/tag/0.23.0

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

NONE

Base Severity

9.1