Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj9p-f539-2mhr

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

EPSS

Процентиль: 12%
0.0004
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-201

Связанные уязвимости

CVSS3: 5.8
ubuntu
11 дней назад

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

CVSS3: 5.8
nvd
11 дней назад

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

CVSS3: 5.8
debian
11 дней назад

A flaw was found in the libsoup HTTP library that can cause proxy auth ...

EPSS

Процентиль: 12%
0.0004
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-201