httpie

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

httpie records in CISA KEV

No httpie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Httpie 4 records MEDIUM

Records

4 records

TI-2022-08551 CVE-2022-24737 · GHSA-9w4w-cpc8-h2fq

Exposure of Sensitive Information to an Unauthorized Actor in httpie

MEDIUM 62

HTTPie is a command-line HTTP client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0165 Published 2022-03-07 Fixed in 3.1.0 CWE-200

TI-2019-08016 CVE-2019-10751 · GHSA-xjjg-vmw6-c2p9

Open redirect in HTTPIE

MEDIUM 42

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a r…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02037 Published 2019-08-23 Fixed in 1.0.3 CWE-601

TI-2023-26015 CVE-2023-48052 · GHSA-8r96-8889-qg2x

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on…

LOW 34

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00305 Published 2023-11-16 Fixed in 3.2.3 CWE-599

TI-2022-00354 CVE-2022-0430 · GHSA-6pc9-xqrg-wfqw

Exposure of Sensitive Information to an Unauthorized Actor in httpie/httpie

LOW 27

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository httpie/httpie prior to 3.1.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01292 Published 2022-03-15 Fixed in 3.1.0 CWE-200

Open these records in search →

Critical	0
High	2
Medium	2
Low	0
No CVSS	0