CVE-2019-18348
Last modified
CVE-2019-18348 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. EPSS estimates a 3.51% chance of exploitation in the next 30 days.
Description
An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the host component of a URL) followed by an HTTP header. This is similar to the CVE-2019-9740 query string issue and the CVE-2019-9947 path string issue. (This is not exploitable when glibc has CVE-2016-10739 fixed.). This is fixed in: v2.7.18, v2.7.18rc1; v3.5.10, v3.5.10rc1; v3.6.11, v3.6.11rc1, v3.6.12; v3.7.8, v3.7.8rc1, v3.7.9; v3.8.3, v3.8.3rc1, v3.8.4, v3.8.4rc1, v3.8.5, v3.8.6, v3.8.6rc1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Python | Python | >= 2.0, <= 2.7.17 |
| Python | Python | >= 3.0, < 3.5.10 |
| Python | Python | >= 3.6.0, < 3.6.11 |
| Python | Python | >= 3.7.0, < 3.7.8 |
| Python | Python | >= 3.8.0, < 3.8.3 |
References
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.htmlMailing List, Technical Description
- https://bugs.python.org/issue30458#msg347282Issue Tracking, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1727276Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00011.htmlMailing List, Technical Description
- https://security.netapp.com/advisory/ntap-20191107-0004/Technical Description
- https://usn.ubuntu.com/4333-1/Technical Description
- https://usn.ubuntu.com/4333-2/Technical Description
- https://www.oracle.com/security-alerts/cpuoct2020.htmlTechnical Description
- http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00041.htmlMailing List, Technical Description
- https://bugs.python.org/issue30458#msg347282Issue Tracking, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1727276Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00011.htmlMailing List, Technical Description
- https://security.netapp.com/advisory/ntap-20191107-0004/Technical Description
- https://usn.ubuntu.com/4333-1/Technical Description
- https://usn.ubuntu.com/4333-2/Technical Description
- https://www.oracle.com/security-alerts/cpuoct2020.htmlTechnical Description
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-18348?
How severe is CVE-2019-18348?
How do I fix CVE-2019-18348?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-18341A vulnerability has been identified in Control Center Server…5.3
- CVE-2019-18342A vulnerability has been identified in Control Center Server…9.9
- CVE-2019-18344Sourcecodester Online Grading System 1.0 is vulnerable to un…9.8
- CVE-2019-18345A reflected XSS issue was discovered in DAViCal through 1.1.…9.3
- CVE-2019-18346A CSRF issue was discovered in DAViCal through 1.1.8. If an …8.8
- CVE-2019-18347A stored XSS issue was discovered in DAViCal through 1.1.8. …5.4
- CVE-2019-18349HotkeyP through 4.9 r96 allows privilege escalation in the p…9.8
- CVE-2019-1835A vulnerability in the CLI of Cisco Aironet Access Points (A…4.4
- CVE-2019-18350In Ant Design Pro 4.0.0, reflected XSS in the user/login red…6.1
- CVE-2019-18351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-18352Improper access control exists on PHOENIX CONTACT FL NAT 220…8.2
- CVE-2019-18355An SSRF issue was discovered in the legacy Web launcher in T…9.8
Are you affected by CVE-2019-18348?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST