CVE-2018-18074

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-522

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.python-requests.org/en/master/community/updates/#release-and-version-historyRelease Notes, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2035Third Party Advisory
https://bugs.debian.org/910766Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/requests/requests/commit/c45d7c49ea75133e52ab22a8e9e13173938e36ffPatch, Third Party Advisory
https://github.com/requests/requests/issues/4716Exploit, Patch, Third Party Advisory
https://github.com/requests/requests/pull/4718Patch, Third Party Advisory
https://usn.ubuntu.com/3790-1/Third Party Advisory
https://usn.ubuntu.com/3790-2/Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html
http://docs.python-requests.org/en/master/community/updates/#release-and-version-historyRelease Notes, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00024.htmlMailing List, Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2035Third Party Advisory
https://bugs.debian.org/910766Exploit, Issue Tracking, Patch, Third Party Advisory
https://github.com/requests/requests/commit/c45d7c49ea75133e52ab22a8e9e13173938e36ffPatch, Third Party Advisory
https://github.com/requests/requests/issues/4716Exploit, Patch, Third Party Advisory
https://github.com/requests/requests/pull/4718Patch, Third Party Advisory
https://usn.ubuntu.com/3790-1/Third Party Advisory
https://usn.ubuntu.com/3790-2/Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html

Timeline

Published: Oct 9, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-180759.8WikidForum 2.20 has SQL Injection via the rpc.php parent_post_id or num_records parameter, or the index.php?action=search select_sort parame CVE-2018-18088.8IBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: CVE-2018-180826.1XSS exists in Waimai Super Cms 20150505 via the fname parameter to the admin.php?m=Food&a=addsave or admin.php?m=Food&a=editsave URI.CVE-2018-180839.8An issue was discovered in DuomiCMS 3.0. Remote PHP code execution is possible via the search.php searchword parameter because "eval" is use CVE-2018-180849.8An issue was discovered in DuomiCMS 3.0. SQL injection exists in the ajax.php file, as demonstrated by the uid parameter.CVE-2018-180868.8EmpireCMS v7.5 has an arbitrary file upload vulnerability in the LoadInMod function in e/class/moddofun.php, exploitable by logged-in users.CVE-2018-180875.4The Bixie Portfolio plugin 1.2.0 for Pagekit has XSS: a logged-in user who has the "Manage portfolio" privilege can inject arbitrary web scr CVE-2018-180886.5OpenJPEG 2.3.0 has a NULL pointer dereference for "red" in the imagetopnm function of jp2/convert.c CVE-2018-180895.5Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x CVE-2018-180905.5Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (ak CVE-2018-180916.5Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 CVE-2018-180937.8Improper file permissions in the installer for Intel VTune Amplifier 2018 Update 3 and before may allow unprivileged user to potentially gai