Main
Vulnerability Database
Exploits
ID:2233 - Exploit for CRLF injection in urllib3 - CVE-2019-11236
ID:2233 - Exploit for CRLF injection in urllib3 - CVE-2019-11236
Published: March 26, 2020
Vulnerability identifier: #VU26412
Vulnerability risk: Medium
CVE-ID: CVE-2019-11236
CWE-ID: CWE-93
Exploitation vector: Remote access
Vulnerable software:
urllib3
urllib3
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to perform a spoofing attack.
The vulnerability exists due to insufficient filtration of user-supplied data passed via HTTP request parameters to urllib3 library. A remote attacker can pass specially crafted data that contains CRLF sequences and perform a spoofing attack.
Remediation
Install updates from vendor's website.