CVE-2021-3116

Publication date

2021-01-11 05:00:49

Family

mitre

State

PUBLISHED

Description

before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or).