Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wj9p-f539-2mhr

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.8

Описание

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

EPSS

Процентиль: 22%
0.00074
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-201

Связанные уязвимости

CVSS3: 5.8
ubuntu
2 месяца назад

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

CVSS3: 5.8
redhat
2 месяца назад

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

CVSS3: 5.8
nvd
2 месяца назад

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

CVSS3: 5.8
debian
2 месяца назад

A flaw was found in the libsoup HTTP library that can cause proxy auth ...

suse-cvrf
25 дней назад

Security update for libsoup

EPSS

Процентиль: 22%
0.00074
Низкий

5.8 Medium

CVSS3

Дефекты

CWE-201