| Package | Affected versions | Patched versions |
|---|---|---|
| urllib3 | < 1.25.9 | 1.25.9 |
| communications cloud native core network function cloud native environment | = 22.2.0 | |
| zfs storage appliance kit | = 8.8 | |
| urllib3 | < 1.25.9 | 1.25.9 |
urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: this is similar to CVE-2020-26116.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free