CVE-2023-32681: Unintended leak of Proxy-Authorization header in requests

Modified

AliasesMGASA-2023-0210SUSE-SU-2023:2638-1SUSE-SU-2023:2865-1+18 more

Published 26-05-2023Last modified 13-02-2025

Vulnerability summary

CVE-2023-32681 is a medium (CVSS 6.1) vulnerability in fedoraproject fedora. EPSS estimates a 2.97% chance of exploitation in the next 30 days, higher than 87.2% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.1, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.1/10

010

Medium · v3.1 (CVE.org)

EPSS score

2.97%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9 · Related 6

OPENSUSE-SU-2025:14997-1 OPENSUSE-SU-2026:12038-1 RHSA-2023:4693 RHSA-2023:6793 RHSA-2023:6818 RHSA-2023:7034+5 more

Timeline

26-05-2023
PublishedVulnerability first disclosed.
13-02-2025
Last modifiedVulnerability information updated.

Description

Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint. This is a product of how we use `rebuild_proxies` to reattach the `Proxy-Authorization` header to requests. For HTTP connections sent through the tunnel, the proxy will identify the header in the request itself and remove it prior to forwarding to the destination server. However when sent over HTTPS, the `Proxy-Authorization` header must be sent in the CONNECT request as the proxy has no visibility into the tunneled request. This results in Requests forwarding proxy credentials to the destination server unintentionally, allowing a malicious actor to potentially exfiltrate sensitive information. This issue has been patched in version 2.31.0.

CVSS metrics

7 scores · 7 sources · 1 version

v3.16.1

EPSS trend

Probability

2.97%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

No change 0.00 pp

From 2.97% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Affected systems

Version check

Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat123 products

babel< 0:2.5.1-10.module+el8.9.0+19487+7dc18407
Cython< 0:0.28.1-7.module+el8.9.0+19487+7dc18407
Cython-debugsource< 0:0.28.1-7.module+el8.9.0+19487+7dc18407
numpy< 1:1.14.2-16.module+el8.9.0+19487+7dc18407
numpy-debugsource< 1:1.14.2-16.module+el8.9.0+19487+7dc18407

pytest< 0:3.4.2-13.module+el8.9.0+19487+7dc18407
python-attrs< 0:17.4.0-10.module+el8.9.0+19487+7dc18407
python-backports< 0:1.0-16.module+el8.9.0+18326+1b5baeee
python-backports-ssl_match_hostname< 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee
python-chardet< 0:3.0.4-10.module+el8.9.0+19487+7dc18407
python-coverage< 0:4.5.1-5.module+el8.9.0+19487+7dc18407
python-coverage-debugsource< 0:4.5.1-5.module+el8.9.0+19487+7dc18407
python-dns< 0:1.15.0-10.module+el8.9.0+19487+7dc18407
python-docs< 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
python-docutils< 0:0.14-12.module+el8.9.0+19487+7dc18407
python-funcsigs< 0:1.0.2-13.module+el8.9.0+19487+7dc18407
python-idna< 0:2.5-7.module+el8.9.0+19487+7dc18407
python-ipaddress< 0:1.0.18-6.module+el8.9.0+18326+1b5baeee
python-jinja2< 0:2.10-9.module+el8.9.0+19487+7dc18407
python-lxml< 0:4.2.3-6.module+el8.9.0+19487+7dc18407
python-lxml-debugsource< 0:4.2.3-6.module+el8.9.0+19487+7dc18407
python-markupsafe< 0:0.23-19.module+el8.9.0+19487+7dc18407
python-mock< 0:2.0.0-13.module+el8.9.0+19487+7dc18407
python-nose< 0:1.3.7-31.module+el8.9.0+19487+7dc18407
python-nose-docs< 0:1.3.7-31.module+el8.9.0+19487+7dc18407
python-pluggy< 0:0.6.0-8.module+el8.9.0+19487+7dc18407
python-psycopg2< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python-psycopg2-debuginfo< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python-psycopg2-debugsource< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python-psycopg2-doc< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python-py< 0:1.5.3-6.module+el8.9.0+19487+7dc18407
python-pygments< 0:2.2.0-22.module+el8.9.0+19487+7dc18407
python-pymongo< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python-pymongo-debuginfo< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python-pymongo-debugsource< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python-PyMySQL< 0:0.8.0-10.module+el8.9.0+19487+7dc18407
python-pysocks< 0:1.6.8-6.module+el8.9.0+19487+7dc18407
python-pytest-mock< 0:1.9.0-4.module+el8.9.0+19487+7dc18407
python-requests< 0:2.25.1-7.el9_2 | < 0:2.20.0-3.el8_8 | < 0:2.20.0-4.module+el8.9.0+19487+7dc18407 | < 0:2.20.0-3.el8_6
python-setuptools_scm< 0:1.15.7-6.module+el8.9.0+19487+7dc18407
python-sqlalchemy< 0:1.3.2-2.module+el8.9.0+19487+7dc18407
python-sqlalchemy-doc< 0:1.3.2-2.module+el8.9.0+19487+7dc18407
python-urllib3< 0:1.24.2-3.module+el8.9.0+19487+7dc18407
python-virtualenv< 0:15.1.0-22.module+el8.9.0+19487+7dc18407
python-wheel< 1:0.31.1-3.module+el8.9.0+19487+7dc18407
python2< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-attrs< 0:17.4.0-10.module+el8.9.0+19487+7dc18407
python2-babel< 0:2.5.1-10.module+el8.9.0+19487+7dc18407
python2-backports< 0:1.0-16.module+el8.9.0+18326+1b5baeee
python2-backports-ssl_match_hostname< 0:3.5.0.1-12.module+el8.9.0+18326+1b5baeee
python2-bson< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-bson-debuginfo< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-chardet< 0:3.0.4-10.module+el8.9.0+19487+7dc18407
python2-coverage< 0:4.5.1-5.module+el8.9.0+19487+7dc18407
python2-coverage-debuginfo< 0:4.5.1-5.module+el8.9.0+19487+7dc18407
python2-Cython< 0:0.28.1-7.module+el8.9.0+19487+7dc18407
python2-Cython-debuginfo< 0:0.28.1-7.module+el8.9.0+19487+7dc18407
python2-debug< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-debuginfo< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-debugsource< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-devel< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-dns< 0:1.15.0-10.module+el8.9.0+19487+7dc18407
python2-docs< 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
python2-docs-info< 0:2.7.16-2.module+el8.9.0+18326+1b5baeee
python2-docutils< 0:0.14-12.module+el8.9.0+19487+7dc18407
python2-funcsigs< 0:1.0.2-13.module+el8.9.0+19487+7dc18407
python2-idna< 0:2.5-7.module+el8.9.0+19487+7dc18407
python2-ipaddress< 0:1.0.18-6.module+el8.9.0+18326+1b5baeee
python2-jinja2< 0:2.10-9.module+el8.9.0+19487+7dc18407
python2-libs< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-lxml< 0:4.2.3-6.module+el8.9.0+19487+7dc18407
python2-lxml-debuginfo< 0:4.2.3-6.module+el8.9.0+19487+7dc18407
python2-markupsafe< 0:0.23-19.module+el8.9.0+19487+7dc18407
python2-mock< 0:2.0.0-13.module+el8.9.0+19487+7dc18407
python2-nose< 0:1.3.7-31.module+el8.9.0+19487+7dc18407
python2-numpy< 1:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-numpy-debuginfo< 1:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-numpy-doc< 1:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-numpy-f2py< 1:1.14.2-16.module+el8.9.0+19487+7dc18407
python2-pip< 0:9.0.3-19.module+el8.9.0+19487+7dc18407
python2-pip-wheel< 0:9.0.3-19.module+el8.9.0+19487+7dc18407
python2-pluggy< 0:0.6.0-8.module+el8.9.0+19487+7dc18407
python2-psycopg2< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-debug< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-debug-debuginfo< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-debuginfo< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-psycopg2-tests< 0:2.7.5-8.module+el8.9.0+19487+7dc18407
python2-py< 0:1.5.3-6.module+el8.9.0+19487+7dc18407
python2-pygments< 0:2.2.0-22.module+el8.9.0+19487+7dc18407
python2-pymongo< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-pymongo-debuginfo< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-pymongo-gridfs< 0:3.7.0-1.module+el8.9.0+19487+7dc18407
python2-PyMySQL< 0:0.8.0-10.module+el8.9.0+19487+7dc18407
python2-pysocks< 0:1.6.8-6.module+el8.9.0+19487+7dc18407
python2-pytest< 0:3.4.2-13.module+el8.9.0+19487+7dc18407
python2-pytest-mock< 0:1.9.0-4.module+el8.9.0+19487+7dc18407
python2-pytz< 0:2017.2-13.module+el8.9.0+19487+7dc18407
python2-pyyaml< 0:3.12-16.module+el8.9.0+19487+7dc18407
python2-pyyaml-debuginfo< 0:3.12-16.module+el8.9.0+19487+7dc18407
python2-requests< 0:2.20.0-4.module+el8.9.0+19487+7dc18407
python2-rpm-macros< 0:3-38.module+el8.9.0+19487+7dc18407
python2-scipy< 0:1.0.0-22.module+el8.9.0+19487+7dc18407
python2-scipy-debuginfo< 0:1.0.0-22.module+el8.9.0+19487+7dc18407
python2-setuptools< 0:39.0.1-13.module+el8.9.0+19487+7dc18407
python2-setuptools_scm< 0:1.15.7-6.module+el8.9.0+19487+7dc18407
python2-setuptools-wheel< 0:39.0.1-13.module+el8.9.0+19487+7dc18407
python2-six< 0:1.11.0-6.module+el8.9.0+18326+1b5baeee
python2-sqlalchemy< 0:1.3.2-2.module+el8.9.0+19487+7dc18407
python2-test< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-tkinter< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-tools< 0:2.7.18-15.module+el8.9.0+20125+68111a8f
python2-urllib3< 0:1.24.2-3.module+el8.9.0+19487+7dc18407
python2-virtualenv< 0:15.1.0-22.module+el8.9.0+19487+7dc18407
python2-wheel< 1:0.31.1-3.module+el8.9.0+19487+7dc18407
python2-wheel-wheel< 1:0.31.1-3.module+el8.9.0+19487+7dc18407
python3-requests< 0:2.25.1-7.el9_2 | < 0:2.20.0-3.el8_8 | < 0:2.20.0-3.el8_6
python3-requests+security< 0:2.25.1-7.el9_2
python3-requests+socks< 0:2.25.1-7.el9_2
pytz< 0:2017.2-13.module+el8.9.0+19487+7dc18407
PyYAML< 0:3.12-16.module+el8.9.0+19487+7dc18407
PyYAML-debugsource< 0:3.12-16.module+el8.9.0+19487+7dc18407
scipy< 0:1.0.0-22.module+el8.9.0+19487+7dc18407
scipy-debugsource< 0:1.0.0-22.module+el8.9.0+19487+7dc18407

Show all 123

Suse32 products

python-requests&distro=SUSE Enterprise Storage 7< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Enterprise Storage 7.1< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise High Availability Extension 12 SP4< 2.11.1-6.34.1
python-requests&distro=SUSE Linux Enterprise High Availability Extension 12 SP5< 2.24.0-8.14.1
python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 2.25.1-150100.6.16.1

python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Micro 5.1< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Micro 5.2< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Micro 5.3< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Micro 5.4< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Module for Advanced Systems Management 12< 2.11.1-6.34.1
python-requests&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Module for Public Cloud 12< 2.24.0-8.14.1
python-requests&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP1< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise Real Time 15 SP3< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Server 12 SP5< 2.24.0-8.14.1
python-requests&distro=SUSE Linux Enterprise Server 15 SP1-LTSS< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise Server 15 SP3-LTSS< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 2.24.0-8.14.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 2.25.1-150100.6.16.1
python-requests&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Manager Client Tools 12< 2.11.1-6.34.1
python-requests&distro=SUSE Manager Proxy 4.2< 2.24.0-150300.3.3.1
python-requests&distro=SUSE Manager Server 4.2< 2.24.0-150300.3.3.1
python3-requests&distro=SUSE Linux Enterprise Server 12 SP5< 2.24.0-8.17.1
python3-requests&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 2.24.0-8.17.1
python3-requests&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 2.24.0-8.17.1
python3-requests&distro=SUSE Linux Enterprise Workstation Extension 12 SP5< 2.24.0-8.17.1

Show all 32

Opensuse4 products

python-requests&distro=openSUSE Leap 15.4< 2.24.0-150300.3.3.1
python-requests&distro=openSUSE Leap 15.5< 2.24.0-150300.3.3.1
python-requests&distro=openSUSE Leap Micro 5.3< 2.24.0-150300.3.3.1
python-requests&distro=openSUSE Tumbleweed< 2.31.0-1.2

Ubuntu2 products

python-pip< 20.0.2-5ubuntu1.9 | < 22.0.2+dfsg-1ubuntu0.7
requests< 2.2.1-1ubuntu0.4+esm1 | < 2.22.0-2ubuntu1.1 | < 2.25.1+dfsg-2ubuntu0.1 | < 2.9.1-3ubuntu0.1+esm1 | < 2.18.4-2ubuntu0.1+esm1

Chainguard1 product

k8s-sidecar-1.22< 1.22.4-r2

Debian1 product

requests< 2.21.0-1+deb10u1 | All versions (No fix recorded) | < 2.31.0+dfsg-1

Fedoraproject1 product

fedoraEOL37

Mageia1 product

python-requests< 2.25.1-1.2.mga8

Psf1 product

requests≥ 2.3.0, < 2.31.0

PyPI1 product

requests< 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5 | ≥ 2.3.0, < 2.31.0

Python1 product

requests≥ 2.3.0, < 2.31.0

11 vendors · 168 products

References

52 links

github.com/psf/requests/security/advisories/GHSA-j8r2-6x86-q33qX Refsource CONFIRMWEBAdvisoryARTICLEREPORTVendor Advisory
github.com/psf/requests/commit/74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5X Refsource MISCWEBFIXPatch
github.com/psf/requests/releases/tag/v2.31.0X Refsource MISCWEBRelease Notes
lists.fedoraproject.org/archives/…WEBMailing ListThird Party Advisory
lists.fedoraproject.org/archives/…WEB
lists.debian.org/debian-lts-announce/2023/06/msg00018.htmlWEB
security.gentoo.org/glsa/202309-08WEBAdvisory
advisories.mageia.org/MGASA-2023-0210.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=32032REPORT
www.debian.org/lts/security/2023/dla-3456WEB

Show all 52 references