CVE-2021-3116

before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean…

published January 11, 2021

CVSS
—
EPSS
2%
Percentile
76.9
In the wild
Unconfirmed
What it is

before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01694 · 76.9th percentile
Published
2021-01-11T05:00Z
EPSS history
Timeline
  • 11 JAN 05:00Z
    before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean…
    cvelistv5