What is GHSA-wm2m-xrrp-j74c?

GHSA-wm2m-xrrp-j74c is a security advisory published by GitHub Security Advisories with Medium severity. HTTP Request Smuggling in netius

Which CVE IDs does GHSA-wm2m-xrrp-j74c cover?

GHSA-wm2m-xrrp-j74c covers the following CVE IDs: CVE-2020-7655. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-wm2m-xrrp-j74c?

GHSA-wm2m-xrrp-j74c has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-wm2m-xrrp-j74c?

GHSA-wm2m-xrrp-j74c affects 1 product, including: pip/netius:\u003c 1.17.58.

GHSA-wm2m-xrrp-j74cMediumCVSS 6.1

HTTP Request Smuggling in netius

Vendor

GitHub Security Advisories

Published

June 18, 2021

Last Modified

October 7, 2024

🔗 CVE IDs covered (1)

CVE-2020-7655 →

📋 Description

netius prior to 1.17.58 is vulnerable to HTTP Request Smuggling. HTTP pipelining issues and request smuggling attacks might be possible due to incorrect Transfer encoding header parsing which could allow for CL:TE or TE:TE attacks.

🎯 Affected products1

pip/netius:< 1.17.58

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-7655
https://snyk.io/vuln/SNYK-PYTHON-NETIUS-569141
https://github.com/hivesolutions/netius/commit/9830881ef68328f8ea9c7901db1d11690677e7d1
https://github.com/advisories/GHSA-wm2m-xrrp-j74c
https://github.com/pypa/advisory-database/tree/main/vulns/netius/PYSEC-2020-242.yaml