Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade delveUpgrade golang-raceUpgrade golang-miscUpgrade opentelemetry-collectorUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade golangUpgrade golang-docs | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade nerdctlUpgrade runcUpgrade golangUpgrade dockerUpgrade containerd-stressUpgrade golang-testsUpgrade runfinch-finchUpgrade golang-binUpgrade amazon-ecr-credential-helper-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golang-miscUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade golistUpgrade oci-add-hooksUpgrade golang-sharedUpgrade runc-debuginfoUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade containerdUpgrade golist-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooksUpgrade golangUpgrade runfinch-finchUpgrade cni-pluginsUpgrade docker-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade cni-plugins-debuginfoUpgrade golang-miscUpgrade golang-binUpgrade libcap-staticUpgrade captree-debuginfoUpgrade libcap-develUpgrade captreeUpgrade runc-debugsourceUpgrade ecs-initUpgrade docker-debugsourceUpgrade golang-srcUpgrade golang-testsUpgrade libcapUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade containerd-stressUpgrade golang-docsUpgrade containerd-debuginfoUpgrade containerdUpgrade runcUpgrade libcap-debuginfoUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade dockerUpgrade runc-debuginfoUpgrade libcap-debugsourceUpgrade cni-plugins-debugsourceUpgrade containerd-debugsourceUpgrade golang-shared | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-docsUpgrade go-toolsetUpgrade golang-raceUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade delveUpgrade golang | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade opentelemetry-collectorUpgrade go-toolsetUpgrade delveUpgrade golang-docsUpgrade golang-binNo solution existsUpgrade delve-debugsourceUpgrade golang-raceUpgrade golang-miscUpgrade golang-srcUpgrade delve-debuginfoUpgrade golang-testsUpgrade golang | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade golangUpgrade delve-debugsourceUpgrade delveUpgrade opentelemetry-collectorUpgrade golang-bin | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.0.4 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-libstdUpgrade go1.23-opensslUpgrade go1.24-raceUpgrade go1.24-opensslUpgrade go1.24-openssl-raceUpgrade go1.23Upgrade go1.23-raceUpgrade go1.24Upgrade go1.23-docUpgrade go1.24-docUpgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.23-openssl-race | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub