Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade delveUpgrade golang-raceUpgrade golang-binUpgrade golang-miscUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade golangUpgrade opentelemetry-collector | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golang-srcUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade golang-miscUpgrade golistUpgrade golist-debuginfoUpgrade ecs-initUpgrade amazon-ssm-agentUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade containerdUpgrade amazon-cloudwatch-agentUpgrade golang-sharedUpgrade oci-add-hooksUpgrade amazon-ecr-credential-helperUpgrade golang-docsUpgrade nerdctl-debuginfoUpgrade golang-binUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-testsUpgrade nerdctlUpgrade soci-snapshotterUpgrade dockerUpgrade runcUpgrade containerd-stressUpgrade golang | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade cni-pluginsUpgrade captree-debuginfoUpgrade golangUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade golang-srcUpgrade oci-add-hooks-debugsourceUpgrade docker-debuginfoUpgrade libcapUpgrade golang-testsUpgrade runc-debugsourceUpgrade oci-add-hooksUpgrade libcap-develUpgrade golang-binUpgrade libcap-staticUpgrade docker-debugsourceUpgrade ecs-initUpgrade captreeUpgrade runfinch-finchUpgrade cni-plugins-debuginfoUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade cni-plugins-debugsourceUpgrade soci-snapshotterUpgrade libcap-debuginfoUpgrade amazon-cloudwatch-agentUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agentUpgrade dockerUpgrade containerd-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade libcap-debugsourceUpgrade golang-sharedUpgrade containerd-stressUpgrade containerdUpgrade runcUpgrade golang-docs | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-docsUpgrade golang-raceUpgrade go-toolsetUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade delve | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-binUpgrade go-toolsetUpgrade opentelemetry-collectorUpgrade golang-docsUpgrade delveUpgrade golang-srcUpgrade golang-miscUpgrade golang-testsUpgrade golangNo solution existsUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-race | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade golangUpgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolsetUpgrade delveUpgrade delve-debugsourceUpgrade opentelemetry-collectorUpgrade golang-bin | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.3.10 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.23Upgrade go1.24-raceUpgrade go1.24Upgrade go1.23-raceUpgrade go1.24-opensslUpgrade go1.23-opensslUpgrade go1.24-libstdUpgrade go1.24-openssl-raceUpgrade govulncheck-vulndbUpgrade go1.23-openssl-docUpgrade go1.24-docUpgrade go1.23-openssl-raceUpgrade go1.24-openssl-docUpgrade go1.23-doc | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub