{"id":"CVE-2018-25091","published":"2023-10-15T00:00:00Z","modified":"2024-09-16T19:01:58Z","title":"urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a…","vendor":null,"product":null,"tier":"tail","description":{"text":"urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive).","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00594,"percentile":0.48382,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/urllib3/urllib3/issues/1510","tags":[]},{"url":"https://github.com/urllib3/urllib3/commit/adb358f8e06865406d1f05e581a16cbea2136fbc","tags":[]},{"url":"https://github.com/urllib3/urllib3/compare/1.24.1...1.24.2","tags":[]}],"priority":{"score":9.7,"factors":[{"name":"EPSS percentile","points":9.68}]},"affected":[{"ecosystem":"PyPI","package":"urllib3","vulnerableRanges":["<1.24.2"],"patched":["1.24.2"],"from":["GHSA-gwvm-45gx-3cf8","PYSEC-2023-207"],"provenance":"source"}],"euvd":{"id":"EUVD-2023-0253","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-urllib3-cve-2018-20060","parents":[{"from":"CVE-2018-20060","to":"CVE-2018-25091","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue exists because of an incomplete fix for CVE-2018-20060 (which was case-sensitive).","from":"CVE.org","in":"CVE-2018-25091"},{"kind":"similar","provenance":"machine","score":0.94,"basis":"same package + description similarity"}]},{"from":"CVE-2019-11324","to":"CVE-2018-25091","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["src/urllib3/poolmanager.py","src/urllib3/util/retry.py"],"commits":["https://github.com/urllib3/urllib3/commit/adb358f8e06865406d1f05e581a16cbea2136fbc","https://github.com/urllib3/urllib3/commit/1efadf43dc63317cd9eaa3e0fdb9e05ab07254b1"],"basis":"shared function","functions":["__init__","urlopen"]}]}],"children":[{"from":"CVE-2018-25091","to":"CVE-2023-45803","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["src/urllib3/poolmanager.py"],"commits":["https://github.com/urllib3/urllib3/commit/adb358f8e06865406d1f05e581a16cbea2136fbc","https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9","https://github.com/urllib3/urllib3/commit/4e50fbc5db74e32cabd5ccc1ab81fc103adfe0b3"],"basis":"shared function","functions":["urlopen"]}]},{"from":"CVE-2018-25091","to":"CVE-2025-50181","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["src/urllib3/poolmanager.py"],"commits":["https://github.com/urllib3/urllib3/commit/adb358f8e06865406d1f05e581a16cbea2136fbc","https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857"],"basis":"shared function","functions":["urlopen"]}]}]}}