Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golangUpgrade opentelemetry-collectorUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade golang-srcUpgrade golang-binUpgrade go-toolsetUpgrade golang-raceUpgrade delve | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade soci-snapshotterUpgrade nerdctl-debuginfoUpgrade nerdctlUpgrade golangUpgrade runcUpgrade golang-testsUpgrade golang-binUpgrade golang-docsUpgrade dockerUpgrade amazon-ecr-credential-helper-debuginfoUpgrade containerd-stressUpgrade runfinch-finchUpgrade ecs-initUpgrade golistUpgrade golang-srcUpgrade oci-add-hooks-debuginfoUpgrade golang-miscUpgrade oci-add-hooksUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golist-debuginfoUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debuginfoUpgrade dockerUpgrade amazon-ssm-agentUpgrade containerd-debugsourceUpgrade golang-docsUpgrade golang-sharedUpgrade soci-snapshotterUpgrade libcap-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade cni-plugins-debugsourceUpgrade containerdUpgrade containerd-stressUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade libcap-debugsourceUpgrade containerd-stress-debuginfoUpgrade libcapUpgrade ecs-initUpgrade golang-testsUpgrade nerdctlUpgrade captree-debuginfoUpgrade golang-srcUpgrade golang-miscUpgrade runfinch-finchUpgrade cni-plugins-debuginfoUpgrade golangUpgrade cni-pluginsUpgrade libcap-develUpgrade captreeUpgrade docker-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade golang-binUpgrade libcap-staticUpgrade runc-debugsourceUpgrade oci-add-hooksUpgrade docker-debugsource | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-testsUpgrade go-toolsetUpgrade golang-raceUpgrade golang-docsUpgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade golangUpgrade delve | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | No solution existsUpgrade golang-srcUpgrade delve-debugsourceUpgrade golang-raceUpgrade golang-testsUpgrade delve-debuginfoUpgrade golangUpgrade golang-miscUpgrade go-toolsetUpgrade golang-docsUpgrade golang-binUpgrade delveUpgrade opentelemetry-collector | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delveUpgrade opentelemetry-collectorUpgrade delve-debugsourceUpgrade golang-binUpgrade golangUpgrade delve-debuginfoUpgrade go-toolsetUpgrade golang-race | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24Upgrade go1.23Upgrade go1.24-raceUpgrade go1.24-openssl-raceUpgrade go1.23-raceUpgrade go1.24-opensslUpgrade go1.23-opensslUpgrade go1.24-libstdUpgrade go1.23-docUpgrade go1.24-openssl-docUpgrade go1.23-openssl-docUpgrade govulncheck-vulndbUpgrade go1.24-docUpgrade go1.23-openssl-race | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-goUpgrade golang-1.22-src | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub