Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g897-jvjx-78vg

Опубликовано: 08 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

EPSS

Процентиль: 53%
0.0068
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-522
CWE-601

Связанные уязвимости

CVSS3: 5.3
ubuntu
10 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 6.5
redhat
10 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 5.3
nvd
10 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 5.3
msrc
10 месяцев назад

bearer token leak on cross-protocol redirect

CVSS3: 5.3
debian
10 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that ...

EPSS

Процентиль: 53%
0.0068
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-522
CWE-601