CVE-2019-10751 — Open Redirect in Httpie
Severity
8.8HIGHNVD
EPSS
0.5%
top 34.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 23
Latest updateSep 11
Description
All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages3 packages
🔴Vulnerability Details
3📋Vendor Advisories
1Debian▶
CVE-2019-10751: httpie - All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open...↗2019
💬Community
3Bugzilla▶
CVE-2019-10751 httpie: url redirection vulnerability allows attacker to write arbitrary file [fedora-all]↗2019-09-11
Bugzilla▶
CVE-2019-10751 httpie: url redirection vulnerability allows attacker to write arbitrary file↗2019-09-11
Bugzilla▶
CVE-2019-10751 httpie: url redirection vulnerability allows attacker to write arbitrary file [epel-7]↗2019-09-11