Skip to content
OpenAdvisories
High · 7.5 CVE-2021-3116 EUVD-2021-0203GHSA-cmc7-mfmr-xqrxPYSEC-2021-46

Logic error in authentication in proxy.py

Published Jan 11, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI proxy-py < 2.3.1 2.3.1 GHSA-cmc7-mfmr-xqrx

References