Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade go-toolsetUpgrade golang-raceUpgrade golang-binUpgrade opentelemetry-collectorUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade golang-docs | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade oci-add-hooks-debuginfoUpgrade amazon-ecr-credential-helperUpgrade golistUpgrade docker-debuginfoUpgrade amazon-cloudwatch-agentUpgrade ecs-initUpgrade golist-debuginfoUpgrade containerdUpgrade golang-miscUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade golang-srcUpgrade oci-add-hooksUpgrade runc-debuginfoUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runfinch-finchUpgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade runcUpgrade soci-snapshotterUpgrade nerdctlUpgrade golang | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade golang-miscUpgrade cni-pluginsUpgrade captreeUpgrade libcap-develUpgrade ecs-initUpgrade golang-binUpgrade oci-add-hooks-debugsourceUpgrade libcap-staticUpgrade golangUpgrade cni-plugins-debuginfoUpgrade captree-debuginfoUpgrade golang-srcUpgrade runc-debugsourceUpgrade containerd-stress-debuginfoUpgrade runfinch-finchUpgrade golang-testsUpgrade docker-debugsourceUpgrade oci-add-hooksUpgrade libcapUpgrade nerdctlUpgrade golang-sharedUpgrade golang-docsUpgrade libcap-debugsourceUpgrade amazon-ecr-credential-helperUpgrade dockerUpgrade containerd-debuginfoUpgrade containerd-stressUpgrade oci-add-hooks-debuginfoUpgrade amazon-ssm-agentUpgrade runc-debuginfoUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade libcap-debuginfoUpgrade runcUpgrade containerdUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agent | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golangUpgrade golang-develUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-raceUpgrade golang-testsUpgrade golang-docsUpgrade go-toolsetUpgrade golangUpgrade golang-srcUpgrade golang-binUpgrade delveUpgrade golang-misc | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-testsUpgrade golangUpgrade delve-debugsourceUpgrade golang-srcNo solution existsUpgrade golang-raceUpgrade golang-miscUpgrade delve-debuginfoUpgrade go-toolsetUpgrade delveUpgrade golang-binUpgrade opentelemetry-collectorUpgrade golang-docs | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade golang-binUpgrade opentelemetry-collectorUpgrade delveUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-raceUpgrade golang | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.23Upgrade go1.24Upgrade go1.23-raceUpgrade go1.24-opensslUpgrade go1.24-openssl-raceUpgrade go1.24-raceUpgrade go1.24-libstdUpgrade go1.23-opensslUpgrade go1.23-openssl-raceUpgrade go1.23-docUpgrade govulncheck-vulndbUpgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade go1.24-doc | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22-srcUpgrade golang-1.22 | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub