CVE:CVE-2021-28363
CNNVD:CNNVD-202103-938
urllib3是一款Python HTTP库。该产品具有线程安全连接池、文件发布支持等。
urllib3 library 1.26.x before 1.26.4 存在信任管理问题漏洞，该漏洞源于SSLContext正确验证的其他服务器的证书将被静默接受。
solution:Upgrade python urllib3 to a higher version than 1.26.4,and avoid the version [1.26.0,1.26.4); Upgrade fedoraproject fedora to a higher version than 34,and avoid the version 34; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.59,and avoid the version 8.59