VDB
BDU%3A2025-09780
BDU%3A2025-09780
PUBLISHED
CVSS 4.900000095367432 MEDIUM
Уязвимость HTTP библиотеки Urllib3 языка программирования Python, связанная с переадресацией URL на ненадежный сайт, позволяющая нарушителю перенаправлять пользователей на произвольный URL-адрес
Risk Scores
CVSS 2.0
4.900000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения, Canonical Ltd., Andrey Petrov | Red Hat Enterprise Linux, Red Hat Quay, Debian GNU/Linux, Red Hat OpenShift Container Platform, Red Hat Satellite, Network Observability Operator, Migration Toolkit for Virtualization, Red Hat Ansible Automation Platform, OpenShift Pipelines, Red Hat Developer Hub, OpenShift AI, Red Hat Enterprise Linux AI, Red Hat OpenShift Lightspeed, Red Hat Trusted Artifact Signer, Ubuntu, Red Hat AI Inference Server, Openshift Service Mesh, Red Hat Discovery, Builds for Red Hat OpenShift, cert-manager Operator for Red Hat OpenShift, Confidential Compute Attestation, Custom Metric Autoscaler operator for Red Hat Openshift, Multiarch Tuning Operator, urllib3 |
Timeline
- Aug 14, 2025 CVE Published
References
- https://github.com/urllib3/urllib3/security/advisories/GHSA-48p4-8xcf-vxj5 url
- https://security-tracker.debian.org/tracker/CVE-2025-50182 url
- https://vuldb.com/?id.313255 url
- https://github.com/urllib3/urllib3/commit/7eb4a2aafe49a279c29b6d1f0ed0f42e9736194f advisory
- https://ubuntu.com/security/CVE-2025-50182 advisory
- https://access.redhat.com/security/cve/CVE-2025-50182 advisory