Published: 17/04/2023 Updated: 01/01/2024

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a newline (\n) into both the header names and values. While the specification states that \r\n\r\n is used to terminate the header list, many servers in the wild will also accept \n\n. This is a follow-up to CVE-2022-24775 where the fix was incomplete. The issue has been patched in versions 1.9.1 and 2.4.5. There are no known workarounds for this vulnerability. Users are advised to upgrade.

Vulnerable Product	Search on Vulmon	Subscribe to Product
guzzlephp psr-7
fedoraproject fedora 37
fedoraproject fedora 38

Debian Bug report logs - #1034581 php-guzzlehttp-psr7: CVE-2023-29197 Package: src:php-guzzlehttp-psr7; Maintainer for src:php-guzzlehttp-psr7 is Debian PHP PEAR Maintainers <pkg-php-pear@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 18 Apr 2023 21:21:02 UTC Severity: impo ...

Automatically copies media uploads to Amazon S3 for delivery. Optionally configure Amazon CloudFront for even faster delivery.

WP Offload Media Lite for Amazon S3, DigitalOcean Spaces, and Google Cloud Storage Contributors: wpengine, deliciousbrains, ianmjones, eriktorsner, kevinwhoffman, tysonreeder, dalewilliams, lewisia32, mattshaw, aaemnnosttv, a5hleyrich, polevaultweb, bradt, joetan Tags: uploads, amazon, s3, amazon s3, digitalocean, digitalocean spaces, google cloud storage, gcs, mirror, admin,

WP Offload SES Lite sends all outgoing WordPress emails through Amazon Simple Email Service (SES) instead of the local wp_mail() function.

WP Offload SES Lite Contributors: wpengine, deliciousbrains, ianmjones, eriktorsner, kevinwhoffman, mattshaw, bradt, SylvainDeaure Tags: amazon ses,smtp,email delivery,gmail smtp,newsletter Requires at least: 53 Tested up to: 64 Requires PHP: 72 Stable tag: 168 Fix your email delivery problems by sending your WordPress emails through Amazon SES's powerful email s

CWE-436 https://github.com/guzzle/psr7/security/advisories/GHSA-q7rv-6hp3-vh96 https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-24775 https://github.com/guzzle/psr7/security/advisories/GHSA-wxmh-65f7-jcvw https://www.rfc-editor.org/rfc/rfc7230#section-3.2.4 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O35UN4IK6VS2LXSRWUDFWY7NI73RKY2U/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FJANWDXJZE5BGLN4MQ4FEHV5LJ6CMKQF/https://lists.debian.org/debian-lts-announce/2023/12/msg00028.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1034581 https://nvd.nist.gov https://github.com/deliciousbrains/wp-amazon-s3-and-cloudfront

CVE-2023-29197

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect