CVSS 3.1
7.4 highCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NCVE-2023-48052
High (7.4) in httpie httpie. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in httpie 3.2.3.
Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 23% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-295, CWE-599
- Published
- Modified
- Record from
- the NVD, synced
Affected
- httpie:httpie
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8r96-8889-qg2x | PyPI | httpie | <3.2.3 | 3.2.3 |
| PYSEC-2023-242 | PyPI | httpie | all versions | no fix published |