CVE-2023-48052

—

CVSS 3.1

7.4 high

EPSS

<1%p23

Published

Nov 16, 2023 (Nov 16, 2023)

Modified

Jun 17, 2026

Description

Missing SSL certificate validation in HTTPie v3.2.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

Vendors: httpie
Products: httpie
Weakness: CWE-295, CWE-599
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.