未評価
before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a...
CVE-2021-3116
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- package pypi.org
- patch github.com
- report cardaci.xyz