Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-delvealma-upgrade-go-toolsetalma-upgrade-golangalma-upgrade-golang-binalma-upgrade-golang-docsalma-upgrade-golang-miscalma-upgrade-golang-racealma-upgrade-golang-srcalma-upgrade-golang-testsalma-upgrade-opentelemetry-collector | Jul 14, 2025 | Jun 11, 2025 | |
| Alpine Linux | alpine-linux-upgrade-go | Aug 8, 2025 | Jun 11, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-amazon-cloudwatch-agentamazon-linux-ami-2-upgrade-amazon-ecr-credential-helperamazon-linux-ami-2-upgrade-amazon-ecr-credential-helper-debuginfoamazon-linux-ami-2-upgrade-amazon-ssm-agentamazon-linux-ami-2-upgrade-containerdamazon-linux-ami-2-upgrade-containerd-debuginfoamazon-linux-ami-2-upgrade-containerd-stressamazon-linux-ami-2-upgrade-dockeramazon-linux-ami-2-upgrade-docker-debuginfoamazon-linux-ami-2-upgrade-ecs-initamazon-linux-ami-2-upgrade-golangamazon-linux-ami-2-upgrade-golang-binamazon-linux-ami-2-upgrade-golang-docsamazon-linux-ami-2-upgrade-golang-miscamazon-linux-ami-2-upgrade-golang-sharedamazon-linux-ami-2-upgrade-golang-srcamazon-linux-ami-2-upgrade-golang-testsamazon-linux-ami-2-upgrade-golistamazon-linux-ami-2-upgrade-golist-debuginfoamazon-linux-ami-2-upgrade-nerdctlamazon-linux-ami-2-upgrade-nerdctl-debuginfoamazon-linux-ami-2-upgrade-oci-add-hooksamazon-linux-ami-2-upgrade-oci-add-hooks-debuginfoamazon-linux-ami-2-upgrade-runcamazon-linux-ami-2-upgrade-runc-debuginfoamazon-linux-ami-2-upgrade-runfinch-finchamazon-linux-ami-2-upgrade-soci-snapshotter | Jun 25, 2025 | Jun 11, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-amazon-cloudwatch-agentamazon-linux-2023-upgrade-amazon-ecr-credential-helperamazon-linux-2023-upgrade-amazon-ssm-agentamazon-linux-2023-upgrade-captreeamazon-linux-2023-upgrade-captree-debuginfoamazon-linux-2023-upgrade-cni-pluginsamazon-linux-2023-upgrade-cni-plugins-debuginfoamazon-linux-2023-upgrade-cni-plugins-debugsourceamazon-linux-2023-upgrade-containerdamazon-linux-2023-upgrade-containerd-debuginfoamazon-linux-2023-upgrade-containerd-debugsourceamazon-linux-2023-upgrade-containerd-stressamazon-linux-2023-upgrade-containerd-stress-debuginfoamazon-linux-2023-upgrade-dockeramazon-linux-2023-upgrade-docker-debuginfoamazon-linux-2023-upgrade-docker-debugsourceamazon-linux-2023-upgrade-ecs-initamazon-linux-2023-upgrade-golangamazon-linux-2023-upgrade-golang-binamazon-linux-2023-upgrade-golang-docsamazon-linux-2023-upgrade-golang-miscamazon-linux-2023-upgrade-golang-sharedamazon-linux-2023-upgrade-golang-srcamazon-linux-2023-upgrade-golang-testsamazon-linux-2023-upgrade-libcapamazon-linux-2023-upgrade-libcap-debuginfoamazon-linux-2023-upgrade-libcap-debugsourceamazon-linux-2023-upgrade-libcap-develamazon-linux-2023-upgrade-libcap-staticamazon-linux-2023-upgrade-nerdctlamazon-linux-2023-upgrade-oci-add-hooksamazon-linux-2023-upgrade-oci-add-hooks-debuginfoamazon-linux-2023-upgrade-oci-add-hooks-debugsourceamazon-linux-2023-upgrade-runcamazon-linux-2023-upgrade-runc-debuginfoamazon-linux-2023-upgrade-runc-debugsourceamazon-linux-2023-upgrade-runfinch-finchamazon-linux-2023-upgrade-soci-snapshotter | Jun 24, 2025 | Jun 11, 2025 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jun 11, 2025 | |
| Debian | no-fix-debian-deb-package | Jun 9, 2025 | Jun 9, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-golanghuawei-euleros-2_0_sp10-upgrade-golang-develhuawei-euleros-2_0_sp10-upgrade-golang-help | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-golanghuawei-euleros-2_0_sp11-upgrade-golang-develhuawei-euleros-2_0_sp11-upgrade-golang-help | Dec 12, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-golanghuawei-euleros-2_0_sp12-upgrade-golang-develhuawei-euleros-2_0_sp12-upgrade-golang-help | Sep 15, 2025 | Sep 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-golanghuawei-euleros-2_0_sp13-upgrade-golang-develhuawei-euleros-2_0_sp13-upgrade-golang-help | Oct 24, 2025 | Sep 9, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-delveoracle-linux-upgrade-golangoracle-linux-upgrade-golang-binoracle-linux-upgrade-golang-docsoracle-linux-upgrade-golang-miscoracle-linux-upgrade-golang-raceoracle-linux-upgrade-golang-srcoracle-linux-upgrade-golang-testsoracle-linux-upgrade-go-toolset | Jul 10, 2025 | Jun 11, 2025 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-delveredhat-upgrade-delve-debuginforedhat-upgrade-delve-debugsourceredhat-upgrade-go-toolsetredhat-upgrade-golangredhat-upgrade-golang-binredhat-upgrade-golang-docsredhat-upgrade-golang-miscredhat-upgrade-golang-raceredhat-upgrade-golang-srcredhat-upgrade-golang-testsredhat-upgrade-opentelemetry-collector | Jul 9, 2025 | Jun 11, 2025 | |
| Rocky_linux | rocky-upgrade-delverocky-upgrade-delve-debuginforocky-upgrade-delve-debugsourcerocky-upgrade-go-toolsetrocky-upgrade-golangrocky-upgrade-golang-binrocky-upgrade-golang-racerocky-upgrade-opentelemetry-collector | Feb 5, 2026 | Oct 10, 2025 | |
| Suse | — | suse-upgrade-go1-23suse-upgrade-go1-23-docsuse-upgrade-go1-23-opensslsuse-upgrade-go1-23-openssl-docsuse-upgrade-go1-23-openssl-racesuse-upgrade-go1-23-racesuse-upgrade-go1-24suse-upgrade-go1-24-docsuse-upgrade-go1-24-libstdsuse-upgrade-go1-24-opensslsuse-upgrade-go1-24-openssl-docsuse-upgrade-go1-24-openssl-racesuse-upgrade-go1-24-racesuse-upgrade-govulncheck-vulndb | Jun 10, 2025 | Jun 10, 2025 |
| Ubuntu | ubuntu-upgrade-golang-1-22ubuntu-upgrade-golang-1-22-goubuntu-upgrade-golang-1-22-src | Jun 20, 2025 | Jun 11, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jun 15, 2026 | Jun 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub