[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2Sg1FHqZ6QZkf2CsXz2ZNW8hjYdURIPujD-81SL2tqg":3,"g5a-risk:CVE-2019-11236":153},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":14,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":103,"weaknesses":104,"weaknessesCount":47,"isActivelyExploited":113,"cisaInfo":14,"otxData":14,"relatedBlogPosts":114,"seoMetadata":115,"configurations":140,"relatedVendorCves":149,"notableEvents":150},"CVE-2019-11236","What is CVE-2019-11236?","In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.","2019-04-15T15:29:00.637","2023-11-07T03:02:48.143",6.1,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","REQUIRED","CHANGED","MEDIUM",2.8,2.7,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,8.6,2.9,0.02073,[38,38,38,38,38,38,38],"Medium",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"python","urllib3","*","cpe:2.3:a:python:urllib3:*:*:*:*:*:*:*:*",1,[49,53,56,60,63,66,73,77,80,83,87,90,93,96,100],{"url":50,"source":51,"tags":52},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00039.html","Opensuse",[],{"url":54,"source":51,"tags":55},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-09\u002Fmsg00041.html",[],{"url":57,"source":58,"tags":59},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2272","Red Hat",[],{"url":61,"source":58,"tags":62},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3335",[],{"url":64,"source":58,"tags":65},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3590",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Fgithub.com\u002Furllib3\u002Furllib3\u002Fissues\u002F1553","GitHub",[70,71,72],"Issue Tracking","Exploit","Third Party Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F06\u002Fmsg00016.html","Debian",[],{"url":78,"source":75,"tags":79},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F06\u002Fmsg00015.html",[],{"url":81,"source":75,"tags":82},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F10\u002Fmsg00012.html",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FNKGPJLVLVYCL4L4B4G5TIOTVK4BKPG72\u002F","Fedoraproject",[],{"url":88,"source":85,"tags":89},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FR62XGEYPUTXMRHGX5I37EBCGQ5COHGKR\u002F",[],{"url":91,"source":85,"tags":92},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FTBI45HO533KYHNB5YRO43TBYKA3E3VRL\u002F",[],{"url":94,"source":85,"tags":95},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FXOSA2NT4DUQDBEIWE6O7KKD24XND7TE2\u002F",[],{"url":97,"source":98,"tags":99},"https:\u002F\u002Fusn.ubuntu.com\u002F3990-1\u002F","Ubuntu",[],{"url":101,"source":98,"tags":102},"https:\u002F\u002Fusn.ubuntu.com\u002F3990-2\u002F",[],15,[105],{"id":106,"name":107,"description":108,"extendedDescription":109,"status":110,"abstraction":111,"structure":112},"CWE-93","Improper Neutralization of CRLF Sequences ('CRLF Injection')","The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.","","Draft","Base","Simple",false,[],{"title":116,"metaDescription":117,"keywords":118,"canonicalUrl":119,"structuredData":120},"What is CVE-2019-11236? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-11236, a medium severity cyber security vulnerability from 2019. In the urllib3 library through 1.24.1 for Python, CRLF in...","CVE-2019-11236, CVE-2019-11236 vulnerability, CVE-2019-11236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, python security, urllib3 vulnerability","\u002Fwhat-is\u002Fcve-2019-11236",{"@context":121,"@type":122,"headline":116,"description":117,"datePublished":9,"dateModified":10,"author":123,"publisher":127,"about":131,"mainEntityOfPage":135,"articleSection":138,"keywords":139},"https:\u002F\u002Fschema.org","TechArticle",{"@type":124,"name":125,"url":126},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":124,"name":125,"url":126,"logo":128},{"@type":129,"url":130},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":132,"name":6,"description":133,"additionalType":134},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":136,"@id":137},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-11236","Cybersecurity","CVE-2019-11236, CVE-2019-11236 vulnerability, CVE-2019-11236 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[141],{"Operator":14,"Negate":14,"Nodes":142},[143],{"Operator":144,"Negate":14,"CPEMatch":145},"OR",[146],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":147,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":148},"304CBF27-88DD-4DF2-8A3A-FD4C02C42895","1.24.2",[],[],{"lastModified":10,"cacheTime":152,"version":32},1792264681238,{"score":154,"band":40,"action":155,"scoredAt":156},43,"Plan remediation","2026-10-16T06:46:00.14959+00:00"]