CVE-2024-1682 - CVE House
Back to Database
Status published Medium CVE-2024-1682

Unclaimed S3 Bucket Reference in psf/requests Documentation

Vulnerability Description

An unclaimed Amazon S3 bucket, 'codeconf', is referenced in an audio file link within the .rst documentation file. This bucket has been claimed by an external party. The use of this unclaimed S3 bucket could lead to data integrity issues, data leakage, availability problems, loss of trustworthiness, and potential further attacks if the bucket is used to host malicious content or as a pivot point for further attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1682

Credits & Attribution

No credits recorded in the NVD database.

References

More from psf

View All →
CVE-2024-47081
Requests vulnerable to .netrc credentials leak via malicious URLs
Medium 5.3
CVE-2024-35195
Requests `Session` object does not verify requests after making first request with verify=False
Medium 5.6
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Medium 6.1

Affected Vendor

Affected Software

psf/requests
Vulnerable Versions:
unspecified

Timeline

Official Publish: November 14th, 2024
Last Modified: November 18th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-840

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.