Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade go-toolsetUpgrade delveUpgrade golang-raceUpgrade golangUpgrade golang-binUpgrade golang-docsUpgrade golang-srcUpgrade golang-testsUpgrade opentelemetry-collectorUpgrade golang-misc | Jul 14, 2025 | Jun 11, 2025 |
| Alpine Linux | — | Upgrade go | Aug 8, 2025 | Jun 11, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade golang-docsUpgrade containerd-stressUpgrade nerdctl-debuginfoUpgrade runcUpgrade soci-snapshotterUpgrade runfinch-finchUpgrade golangUpgrade golang-testsUpgrade nerdctlUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golang-binUpgrade containerdUpgrade docker-debuginfoUpgrade runc-debuginfoUpgrade golist-debuginfoUpgrade golistUpgrade amazon-ssm-agentUpgrade oci-add-hooksUpgrade oci-add-hooks-debuginfoUpgrade ecs-initUpgrade golang-srcUpgrade golang-sharedUpgrade amazon-ecr-credential-helperUpgrade amazon-cloudwatch-agentUpgrade golang-miscUpgrade containerd-debuginfo | Jun 25, 2025 | Jun 11, 2025 |
| Amazon_linux_2023 | — | Upgrade libcap-staticUpgrade golang-binUpgrade cni-pluginsUpgrade golang-miscUpgrade captreeUpgrade oci-add-hooks-debugsourceUpgrade golangUpgrade runc-debugsourceUpgrade docker-debugsourceUpgrade libcap-develUpgrade oci-add-hooksUpgrade docker-debuginfoUpgrade cni-plugins-debuginfoUpgrade ecs-initUpgrade runfinch-finchUpgrade golang-srcUpgrade captree-debuginfoUpgrade libcapUpgrade containerd-stress-debuginfoUpgrade nerdctlUpgrade golang-testsUpgrade containerd-debuginfoUpgrade runcUpgrade runc-debuginfoUpgrade libcap-debuginfoUpgrade soci-snapshotterUpgrade containerd-debugsourceUpgrade oci-add-hooks-debuginfoUpgrade golang-docsUpgrade dockerUpgrade cni-plugins-debugsourceUpgrade amazon-cloudwatch-agentUpgrade libcap-debugsourceUpgrade amazon-ecr-credential-helperUpgrade containerdUpgrade amazon-ssm-agentUpgrade golang-sharedUpgrade containerd-stress | Jun 24, 2025 | Jun 11, 2025 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jun 11, 2025 |
| Debian | — | Upgrade golang-1.24No solution exists | Jun 9, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Dec 12, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 15, 2025 | Sep 9, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Oct 24, 2025 | Sep 9, 2025 |
| Oracle_linux | — | Upgrade golang-srcUpgrade golang-miscUpgrade golang-binUpgrade delveUpgrade golangUpgrade golang-raceUpgrade go-toolsetUpgrade golang-docsUpgrade golang-tests | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | — | Upgrade golang-raceUpgrade golang-testsUpgrade delve-debugsourceUpgrade golangUpgrade delve-debuginfoUpgrade golang-srcNo solution existsUpgrade golang-miscUpgrade delveUpgrade golang-docsUpgrade opentelemetry-collectorUpgrade go-toolsetUpgrade golang-bin | Jul 9, 2025 | Jun 11, 2025 |
| Rocky_linux | — | Upgrade golang-binUpgrade opentelemetry-collectorUpgrade delveUpgrade delve-debugsourceUpgrade golangUpgrade go-toolsetUpgrade golang-raceUpgrade delve-debuginfo | Feb 5, 2026 | Oct 10, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.12Upgrade Splunk Enterprise to version 9.4.8Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.0.3Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.9 | Jul 30, 2026 | Jun 11, 2025 |
| Suse | — | Upgrade go1.24-docUpgrade govulncheck-vulndbUpgrade go1.23-openssl-docUpgrade go1.24-openssl-docUpgrade go1.23-openssl-raceUpgrade go1.23-docUpgrade go1.24-raceUpgrade go1.23Upgrade go1.24-opensslUpgrade go1.23-raceUpgrade go1.24Upgrade go1.23-opensslUpgrade go1.24-libstdUpgrade go1.24-openssl-race | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | — | Upgrade golang-1.22-srcUpgrade golang-1.22Upgrade golang-1.22-go | Jun 20, 2025 | Jun 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub