Skip to content
OpenAdvisories
Medium USN-2382-1 2 CVEs

requests vulnerabilities

Published Oct 14, 2014 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Jakub Wilk discovered that Requests incorrectly reused authentication
credentials after being redirected. An attacker could possibly use this
issue to obtain authentication credentials intended for another site.
(CVE-2014-1829, CVE-2014-1830)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS requests 2.2.1-1ubuntu0.1

Vulnerabilities 2

  • Medium 5.3
    CVE-2014-1829

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI
  • Medium —
    CVE-2014-1830

    Exposure of Sensitive Information to an Unauthorized Actor in Requests

    Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.

    requests requests requests Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2014-1829
  • report
    https://ubuntu.com/security/CVE-2014-1830