CVE-2014-1830

Requests <2.3.0 - Info Disclosure

Title source: llm

Description

Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

References (6)

[Third Party Advisory] http://advisories.mageia.org/MGASA-2014-0409.html

[Mailing List] http://lists.opensuse.org/opensuse-updates/2016-01/msg00095.html

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDVSA-2015:133

[Vendor Advisory] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733108

[Issue Tracking] https://github.com/kennethreitz/requests/issues/1885

[Third Party Advisory] http://www.debian.org/security/2015/dsa-3146

Scores

EPSS 0.0046

EPSS Percentile 63.9%

Classification

CWE

CWE-200

Status draft

Affected Products (3)

opensuse/opensuse

python/requests < 2.2.1

pypi/requests < 2.3.0PyPI

Timeline

Published Oct 15, 2014

Tracked Since Feb 18, 2026