Guzzle Information Disclosure Vulnerability

Guzzle is a PHP HTTP client for guzzle individual developers that makes it easy to send HTTP requests and easily integrate with web services. An information disclosure vulnerability exists in Guzzle versions prior to 7.4.3, and prior to 6.5.6, which stems from a vulnerability that allows a malicious server to set cookies for unrelated domains, which can be exploited by an attacker to log in to their account from the Guzzle client and retrieve private API requests from their account’s security logs.