Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade delveUpgrade golang-raceUpgrade golang-binUpgrade opentelemetry-collectorUpgrade golang-testsUpgrade golang-docsUpgrade golangUpgrade golang-miscUpgrade golang-src | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade runfinch-finchUpgrade soci-snapshotterUpgrade golang-docsUpgrade dockerUpgrade nerdctlUpgrade golangUpgrade runcUpgrade golang-testsUpgrade golang-binUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golist-debuginfoUpgrade golang-miscUpgrade golang-srcUpgrade docker-debuginfoUpgrade golistUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade runc-debuginfoUpgrade amazon-ssm-agentUpgrade ecs-initUpgrade oci-add-hooks-debuginfoUpgrade amazon-cloudwatch-agentUpgrade containerd-debuginfoUpgrade oci-add-hooksUpgrade golang-shared | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golangUpgrade cni-pluginsUpgrade nerdctlUpgrade oci-add-hooksUpgrade golang-binUpgrade libcap-develUpgrade libcap-staticUpgrade libcapUpgrade cni-plugins-debuginfoUpgrade runfinch-finchUpgrade captreeUpgrade runc-debugsourceUpgrade docker-debuginfoUpgrade ecs-initUpgrade oci-add-hooks-debugsourceUpgrade captree-debuginfoUpgrade golang-srcUpgrade docker-debugsourceUpgrade golang-miscUpgrade containerd-stress-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade containerd-stressUpgrade containerd-debuginfoUpgrade golang-docsUpgrade dockerUpgrade containerd-debugsourceUpgrade runc-debuginfoUpgrade libcap-debuginfoUpgrade amazon-ssm-agentUpgrade runcUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade libcap-debugsourceUpgrade soci-snapshotterUpgrade golang-shared | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | No solution existsUpgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-raceUpgrade golang-docsUpgrade go-toolsetUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade delve | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-docsUpgrade go-toolsetUpgrade delveUpgrade opentelemetry-collectorUpgrade golang-binUpgrade delve-debuginfoUpgrade golang-miscUpgrade golang-srcUpgrade golang-testsNo solution existsUpgrade delve-debugsourceUpgrade golang-raceUpgrade golang | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade delveUpgrade delve-debugsourceUpgrade golang-binUpgrade opentelemetry-collector | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.3 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.23-openssl-raceUpgrade go1.24-docUpgrade go1.24-openssl-docUpgrade go1.23-docUpgrade govulncheck-vulndbUpgrade go1.23-openssl-docUpgrade go1.24Upgrade go1.23-raceUpgrade go1.24-libstdUpgrade go1.23-opensslUpgrade go1.24-openssl-raceUpgrade go1.23Upgrade go1.24-raceUpgrade go1.24-openssl | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22-srcUpgrade golang-1.22 | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub