CVE-2022-31043

🗓️ 10 Jun 2022 00:15:07Reported by [email protected]Type

Guzzle Open Source PHP HTTP Client Sensitive Information Disclosur

Reporter	Title	Published	Views	Family All 54
BDU FSTEC	The vulnerability of the Guzzle client HTTP library, a PHP programming language interpreter, related to authentication errors, allows attackers to disclose sensitive information that is protected.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Guzzle client HTTP library, a PHP programming language interpreter, stems from improperly implemented security checks for standard elements, allowing attackers to disclose sensitive information.	29 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-31043	11 Jun 202206:19	–	circl
CNNVD	Guzzle 信息泄露漏洞	9 Jun 202200:00	–	cnnvd
CVE	CVE-2022-31043	9 Jun 202200:00	–	cve
Cvelist	CVE-2022-31043 Fix failure to strip Authorization header on HTTP downgrade in Guzzle	9 Jun 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5246-1] mediawiki security update	4 Oct 202218:53	–	debian
Debian CVE	CVE-2022-31043	9 Jun 202200:00	–	debiancve
Tenable Nessus	Debian DSA-5246-1 : mediawiki - security update	5 Oct 202200:00	–	nessus
Tenable Nessus	Drupal 9.2.x < 9.2.21 / 9.3.x < 9.3.16 Drupal Multiple Vulnerabilities (SA-CORE-2022-011)	10 Jun 202200:00	–	nessus

NVD

Node

guzzlephp guzzleRange7.0.0–7.4.4

Node

drupal drupalRange9.2.0–9.2.21

drupal drupalRange9.3.0–9.3.16

drupal drupalMatch9.4.0alpha1

drupal drupalMatch9.4.0beta1

drupal drupalMatch9.4.0rc1

Node

Source	Link
rfc-editor	www.rfc-editor.org/rfc/rfc9110.html
drupal	www.drupal.org/sa-core-2022-011
debian	www.debian.org/security/2022/dsa-5246
github	www.github.com/guzzle/guzzle/security/advisories/GHSA-w248-ffj2-4v5q
github	www.github.com/guzzle/guzzle/commit/e3ff079b22820c2029d4c2a87796b6a0b8716ad8

17 Jun 2026 04:44Current

CVSS 25

CVSS 3.17.5

EPSS0.01808