CVE:CVE-2020-11078
CNNVD:CNNVD-202005-1097
httplib2是一款HTTP客户端库。
httplib2 0.18.0之前版本中存在注入漏洞。攻击者可通过控制的uri（httplib2.Http.request()）未转义部分利用该漏洞更改请求标头和正文，并将其他隐藏请求发送到同一服务器。
solution:Upgrade httplib2_project httplib2 to a higher version than 0.18.0,and avoid the version (,0.18.0); Upgrade fedoraproject fedora to a higher version than 31,32,and avoid the version 31,32; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0