[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPTnUETi5h4wRzr4sk6JRFzevlCDz6TzptIk6fkWQvTA":3,"g5a-risk:CVE-2018-20060":188},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":60,"references":61,"referencesCount":132,"weaknesses":133,"weaknessesCount":137,"isActivelyExploited":138,"cisaInfo":15,"otxData":15,"relatedBlogPosts":139,"seoMetadata":140,"configurations":165,"relatedVendorCves":184,"notableEvents":185},"CVE-2018-20060","What is CVE-2018-20060?","urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme). This can allow for credentials in the Authorization header to be exposed to unintended hosts or transmitted in cleartext.","urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port...","2018-12-11T17:29:00.38","2024-12-27T16:15:22.593",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.04488,[40,40,40,40,40,40,40],"Critical",[44,49,54,57],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"python","urllib3","*","cpe:2.3:a:python:urllib3:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"fedoraproject","fedora","28","cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"29","cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":58,"criteria":59,"vulnerable":4},"30","cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*",4,[62,66,70,77,82,85,88,92,96,99,102,106,108,110,112,114,116,118,120,122,124,126,130],{"url":63,"source":64,"tags":65},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00039.html","Opensuse",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2272","Red Hat",[],{"url":71,"source":68,"tags":72},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1649153",[73,74,75,76],"Issue Tracking","Mitigation","Patch","Third Party Advisory",{"url":78,"source":79,"tags":80},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fblob\u002Fmaster\u002FCHANGES.rst","GitHub",[81,76],"Release Notes",{"url":83,"source":79,"tags":84},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fissues\u002F1316",[76],{"url":86,"source":79,"tags":87},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fpull\u002F1346",[76],{"url":89,"source":90,"tags":91},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F06\u002Fmsg00015.html","Debian",[],{"url":93,"source":94,"tags":95},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F5SJERZEJDSUYQP7BNBXMBHRHGY26HRZD\u002F","Fedoraproject",[],{"url":97,"source":94,"tags":98},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FBXLAXHM3Z6DUCXZ7ZXZ2EAYJXWDCZFCT\u002F",[],{"url":100,"source":94,"tags":101},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FXWP36YW3KSVLXDBY3QJKDYEPCIMN3VQZ\u002F",[],{"url":103,"source":104,"tags":105},"https:\u002F\u002Fusn.ubuntu.com\u002F3990-1\u002F","Ubuntu",[],{"url":63,"source":64,"tags":107},[],{"url":67,"source":68,"tags":109},[],{"url":71,"source":68,"tags":111},[73,74,75,76],{"url":78,"source":79,"tags":113},[81,76],{"url":83,"source":79,"tags":115},[76],{"url":86,"source":79,"tags":117},[76],{"url":89,"source":90,"tags":119},[],{"url":93,"source":94,"tags":121},[],{"url":97,"source":94,"tags":123},[],{"url":100,"source":94,"tags":125},[],{"url":127,"source":128,"tags":129},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241227-0010\u002F","Netapp",[],{"url":103,"source":104,"tags":131},[],23,[134],{"id":135,"name":135,"description":136},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":141,"metaDescription":142,"keywords":143,"canonicalUrl":144,"structuredData":145},"What is CVE-2018-20060? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20060, a critical severity cyber security vulnerability from 2018. urllib3 before version 1.23 does not remove the Authori...","CVE-2018-20060, CVE-2018-20060 vulnerability, CVE-2018-20060 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, python security, fedoraproject security, urllib3 vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2018-20060",{"@context":146,"@type":147,"headline":141,"description":142,"datePublished":10,"dateModified":11,"author":148,"publisher":152,"about":156,"mainEntityOfPage":160,"articleSection":163,"keywords":164},"https:\u002F\u002Fschema.org","TechArticle",{"@type":149,"name":150,"url":151},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":149,"name":150,"url":151,"logo":153},{"@type":154,"url":155},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":157,"name":6,"description":158,"additionalType":159},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":161,"@id":162},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20060","Cybersecurity","CVE-2018-20060, CVE-2018-20060 vulnerability, CVE-2018-20060 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[166,174],{"Operator":15,"Negate":15,"Nodes":167},[168],{"Operator":169,"Negate":15,"CPEMatch":170},"OR",[171],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":172,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":173,"VersionEndIncluding":15},"EBAEEBFC-28B1-4142-A926-4681E4607961","1.23",{"Operator":15,"Negate":15,"Nodes":175},[176],{"Operator":169,"Negate":15,"CPEMatch":177},[178,180,182],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":179,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DC1BD7B7-6D88-42B8-878E-F1318CA5FCAF",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"D100F7CE-FC64-4CC6-852A-6136D72DA419",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":183,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"97A4B8DF-58DA-4AB6-A1F9-331B36409BA3",[],[],{"lastModified":11,"cacheTime":187,"version":33},1792264681320,{"score":189,"band":190,"action":191,"scoredAt":192},55,"Medium","Plan remediation","2026-10-16T06:45:14.85186+00:00"]