This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-10751 →

DEBIAN-CVE-2019-10751

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supp...

Original description

The description as published by the source.

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 httpie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

Debian:13 httpie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

Debian:14 httpie

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.3-1"}]}]

References

advisory security-tracker.debian.org