Name: CVE-2022-0155: Exposure of Private Personal Information to an Unauthorized Actor
Creator: Rapid7
Published: 2022-01-10T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-0155, CWE-359, CVSS 6.5, EPSS 0.00903

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)
CVSS 3.0 Base Score: 8
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade node-follow-redirects	Jul 30, 2024	Jan 10, 2022
Dell Powerstore Dsa2023366	—	Upgrade Dell PowerStoreOS to the latest version	Oct 23, 2025	Oct 5, 2023
Suse	—	Upgrade libisc1606Upgrade bindUpgrade libirs1601-32bitUpgrade bind-docUpgrade libbind9-1600-32bitUpgrade libisccc1600Upgrade libbind9-1600Upgrade libirs-develUpgrade libdns1605-32bitUpgrade grafanaUpgrade wireUpgrade dracut-saltbootUpgrade libisccfg1600-32bitUpgrade libisccfg1600Upgrade libisc1606-32bitUpgrade spacecmdUpgrade python3-bindUpgrade libdns1605Upgrade bind-utilsUpgrade libisccc1600-32bitUpgrade bind-chrootenvUpgrade libns1604-32bitUpgrade libirs1601Upgrade libns1604Upgrade bind-develUpgrade bind-devel-32bit	Jun 22, 2023	Jan 10, 2022
Ubuntu	—	Upgrade node-follow-redirects (Ubuntu Pro)	Apr 29, 2026	Apr 28, 2026

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence