Reliance on Untrusted Inputs in a Security Decision in aiohttp - #VU153856

Vulnerability details

The vulnerability allows a remote attacker to bypass application security logic.

The vulnerability exists due to reliance on untrusted inputs in a security decision in aiohttp's Request.scheme attribute when processing absolute-form request targets. A remote attacker can send an absolute-form request with a spoofed scheme that makes the application misidentify whether a connection is encrypted to bypass application security logic.

Exploitation requires application code that depends on the Request.scheme attribute for security decisions.

Affected software

Remediation

External References

• https://github.com/aio-libs/aiohttp/security/advisories/GHSA-f9xw-jh8m-3mwq
• https://github.com/aio-libs/aiohttp/commit/6d4e7b01f9b951aa084a75d7356e907d4ee80411

Related Security Bulletins

• Multiple vulnerabilities in aiohttp