VULNERABILITY INTELLIGENCE

CVE-2019-10751

CVSS score8.8 HIGH
EPSS probability2.04%
CISA KEVNot currently listed
Published2019-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

All versions of the HTTPie package prior to version 1.0.3 are vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control.

Weakness classification

  • CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

Primary references