Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-docsUpgrade golang-binUpgrade golangUpgrade golang-miscUpgrade opentelemetry-collectorUpgrade golang-testsUpgrade golang-srcUpgrade golang-raceUpgrade delveUpgrade go-toolset | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade golistUpgrade docker-debuginfoUpgrade golang-miscUpgrade golist-debuginfoUpgrade amazon-cloudwatch-agentUpgrade golang-srcUpgrade containerdUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade oci-add-hooksUpgrade containerd-debuginfoUpgrade amazon-ssm-agentUpgrade ecs-initUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade dockerUpgrade runfinch-finchUpgrade golang-binUpgrade golang-docsUpgrade golangUpgrade runcUpgrade golang-testsUpgrade soci-snapshotterUpgrade nerdctlUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade amazon-ecr-credential-helper-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade libcap-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade containerd-debugsourceUpgrade containerdUpgrade dockerUpgrade oci-add-hooks-debuginfoUpgrade amazon-cloudwatch-agentUpgrade cni-plugins-debugsourceUpgrade libcap-debugsourceUpgrade amazon-ecr-credential-helperUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade soci-snapshotterUpgrade containerd-stressUpgrade golang-docsUpgrade libcap-staticUpgrade captreeUpgrade captree-debuginfoUpgrade golang-srcUpgrade cni-plugins-debuginfoUpgrade runfinch-finchUpgrade golang-miscUpgrade golangUpgrade cni-pluginsUpgrade golang-testsUpgrade libcapUpgrade ecs-initUpgrade runc-debugsourceUpgrade docker-debugsourceUpgrade oci-add-hooks-debugsourceUpgrade oci-add-hooksUpgrade docker-debuginfoUpgrade nerdctlUpgrade containerd-stress-debuginfoUpgrade libcap-develUpgrade golang-bin | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-testsUpgrade golang-docsUpgrade go-toolsetUpgrade golang-raceUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade delveUpgrade golang | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-binUpgrade opentelemetry-collectorUpgrade go-toolsetUpgrade delveUpgrade golang-docsNo solution existsUpgrade golang-srcUpgrade golang-miscUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-testsUpgrade delve-debuginfoUpgrade golang | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade golang-binUpgrade opentelemetry-collectorUpgrade delveUpgrade golangUpgrade delve-debuginfoUpgrade golang-raceUpgrade go-toolset | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-docUpgrade go1.23-openssl-raceUpgrade govulncheck-vulndbUpgrade go1.23-docUpgrade go1.23-openssl-docUpgrade go1.24-openssl-docUpgrade go1.23-opensslUpgrade go1.23-raceUpgrade go1.24-opensslUpgrade go1.24-libstdUpgrade go1.23Upgrade go1.24-raceUpgrade go1.24-openssl-raceUpgrade go1.24 | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-goUpgrade golang-1.22Upgrade golang-1.22-src | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub