CVE-2023-48052

7.4

HIGHCVSS v3

Published

November 16, 2023

Affected

4 projects

Assigned by

MITRE

Severity scale

010

Description

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

httpie

NPMA lightweight, Promise-based wrapper for Node.js HTTP requests~!

= 3.2.2NVD

lukeed/httpie

GitHubA Node.js HTTP client as easy as pie! 🥧

= 3.2.2NVD

@myunisoft/httpie

NPM

More on this CVE

NVD↗GitHub Advisory↗

MyUnisoft Node.js HTTP client that use Undici client

= 3.2.2NVD

MyUnisoft/httpie

GitHubA modern and light Node.js http client 🐢🚀 (built with undici under the hood).

= 3.2.2NVD

Security Advisories

CVE-2023-48052

Description

More on this CVE