CVE-2014-1829: Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

PriorityP429medium5CVSS 2.0

AVNACLAuNCPINAN

EPSS

2.20%

80.5th percentile

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
canonical	ubuntu_linux	—	—
debian	debian_linux	—	—
debian	requests	< requests 2.3.0-1 (bookworm)	requests 2.3.0-1 (bookworm)
mageia	mageia	—	—
python	requests	<= 2.2.1	—
python	requests	>= 0 < 2.3.0-1	2.3.0-1
python	requests	>= 0 < 2.3.0-1	2.3.0-1
python	requests	>= 0 < 2.3.0-1	2.3.0-1
python	requests	>= 0 < 2.3.0-1	2.3.0-1
python	requests	>= 0 < 2.3.0	2.3.0
python	requests	>= 0 < 2.2.1-1ubuntu0.1	2.2.1-1ubuntu0.1

CVSS provenance

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

osv5.0MEDIUM

vendor_debian5.0MEDIUM

vendor_redhat5.0MEDIUM

vendor_ubuntu5.0MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Nuclei

Titan FTP Server Search Function < 10.40 - User Enumeration

nuclei·CVSS 5.0

CVE-2014-1842 [MEDIUM] Titan FTP Server Search Function < 10.40 - User Enumeration Titan FTP Server Search Function < 10.40 - User Enumeration Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the web interface search functionality. Remote attackers can list all existing users by submitting "/../" in the search bar, enabling user enumeration and reconnaissance. Template: id: CVE-2014-1842 info: name: Titan FTP Server Search Function < 10.40 - User Enumeration author: pussycat0x severity: medium description: | Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the web interface search functionality. Remote attackers can list all existing users by submitting "/../" in the search bar, enabling user enumeration and reconnaissance. impact: | Unauthenticated attackers can explo

Nuclei

Titan FTP Server < 10.40 Move Function - Directory Traversal

nuclei·CVSS 5.0

CVE-2014-1841 [MEDIUM] Titan FTP Server < 10.40 Move Function - Directory Traversal Titan FTP Server < 10.40 Move Function - Directory Traversal Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the Move function. Remote attackers can copy the complete home folder of another user by exploiting the ../ path traversal in the search-bar value, allowing unauthorized access to sensitive user data. Template: id: CVE-2014-1841 info: name: Titan FTP Server < 10.40 Move Function - Directory Traversal author: pussycat0x severity: medium description: | Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability in the Move function. Remote attackers can copy the complete home folder of another user by exploiting the ../ path traversal in the search-bar value, allowing unauthorized access to sens

Nuclei

Titan FTP Server < 10.40 - User Properties Traversal

nuclei·CVSS 5.0

CVE-2014-1843 [MEDIUM] Titan FTP Server < 10.40 - User Properties Traversal Titan FTP Server < 10.40 - User Properties Traversal Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability that allows remote attackers to view "Properties" of user folders via path traversal. This enables user enumeration and access to sensitive user information that could aid in launching further attacks. Template: id: CVE-2014-1843 info: name: Titan FTP Server < 10.40 - User Properties Traversal author: pussycat0x severity: medium description: | Titan FTP Server versions prior to 10.40 build 1829 contain a directory traversal vulnerability that allows remote attackers to view "Properties" of user folders via path traversal. This enables user enumeration and access to sensitive user information that could aid in launching further attacks. imp