Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opentelemetry-collectorUpgrade golang-binUpgrade golang-testsUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-docsUpgrade go-toolsetUpgrade delveUpgrade golang-race | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade nerdctl-debuginfoUpgrade containerd-stressUpgrade golang-docsUpgrade soci-snapshotterUpgrade golangUpgrade golang-testsUpgrade runcUpgrade golang-binUpgrade nerdctlUpgrade runfinch-finchUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runc-debuginfoUpgrade amazon-ecr-credential-helperUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade golang-sharedUpgrade golist-debuginfoUpgrade golistUpgrade golang-miscUpgrade containerd-debuginfoUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooksUpgrade docker-debuginfoUpgrade containerdUpgrade amazon-ssm-agentUpgrade golang-src | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade containerd-stressUpgrade libcap-debuginfoUpgrade amazon-ssm-agentUpgrade amazon-ecr-credential-helperUpgrade soci-snapshotterUpgrade golang-docsUpgrade golang-sharedUpgrade dockerUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade containerd-debuginfoUpgrade runcUpgrade containerdUpgrade containerd-debugsourceUpgrade libcap-debugsourceUpgrade amazon-cloudwatch-agentUpgrade cni-plugins-debugsourceUpgrade docker-debuginfoUpgrade libcap-develUpgrade oci-add-hooksUpgrade runfinch-finchUpgrade cni-plugins-debuginfoUpgrade golang-miscUpgrade golangUpgrade oci-add-hooks-debugsourceUpgrade cni-pluginsUpgrade ecs-initUpgrade libcapUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade golang-testsUpgrade captreeUpgrade libcap-staticUpgrade golang-srcUpgrade golang-binUpgrade captree-debuginfoUpgrade runc-debugsourceUpgrade docker-debugsource | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24 | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade go-toolsetUpgrade golang-docsUpgrade golang-raceUpgrade golang-testsUpgrade golangUpgrade golang-srcUpgrade golang-binUpgrade golang-miscUpgrade delve | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-binUpgrade go-toolsetUpgrade delveUpgrade golang-docsUpgrade opentelemetry-collectorUpgrade delve-debugsourceUpgrade delve-debuginfoNo solution existsUpgrade golangUpgrade golang-testsUpgrade golang-raceUpgrade golang-miscUpgrade golang-src | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade golang-raceUpgrade go-toolsetUpgrade delve-debuginfoUpgrade golangUpgrade golang-binUpgrade opentelemetry-collectorUpgrade delve-debugsourceUpgrade delve | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.3.9Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 9.2.12 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-opensslUpgrade go1.24-libstdUpgrade go1.23-opensslUpgrade go1.24-openssl-raceUpgrade go1.23Upgrade go1.24-raceUpgrade go1.23-raceUpgrade go1.24Upgrade govulncheck-vulndbUpgrade go1.24-openssl-docUpgrade go1.24-docUpgrade go1.23-docUpgrade go1.23-openssl-raceUpgrade go1.23-openssl-doc | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22Upgrade golang-1.22-srcUpgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub