CVE-2021-3116

HIGH

before_upstream_connection <2.3.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).

References (3)

Scores

CVSS v3 7.5
EPSS 0.0041
EPSS Percentile 61.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-697
Status published
Products (2)
proxy.py_project/proxy.py < 2.3.1
pypi/proxy.py 0 - 2.3.1PyPI
Published Jan 11, 2021
Tracked Since Feb 18, 2026