PT-2022-20476 · Mechanize +2 · Mechanize +2

🗓️ 09 Jun 2022 00:00:00Reported by Positive TechnologiesType

Mechanize versions before 2.8.5 leak Authorization header after redirects to a different port; upgrade to 2.8.5.

Reporter	Title	Published	Views	Family All 23
Circl	CVE-2022-31033	10 Jun 202200:33	–	circl
CNNVD	Mechanize 信息泄露漏洞	9 Jun 202200:00	–	cnnvd
CVE	CVE-2022-31033	9 Jun 202220:00	–	cve
Cvelist	CVE-2022-31033 Authorization header leak in rubygem Mechanize	9 Jun 202220:00	–	cvelist
Debian CVE	CVE-2022-31033	9 Jun 202220:00	–	debiancve
EUVD	EUVD-2022-5951	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 36 Update: rubygem-mechanize-2.8.5-1.fc36	19 Jun 202200:38	–	fedora
Fedora	[SECURITY] Fedora 35 Update: rubygem-mechanize-2.8.5-1.fc35	19 Jun 202200:51	–	fedora
Github Security Blog	Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect	9 Jun 202223:47	–	github
NVD	CVE-2022-31033	9 Jun 202220:15	–	nvd

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/mechanize/CVE-2022-31033.yml
github	www.github.com/sparklemotion/mechanize/commit/c7fe6996a5b95f9880653ba3bc548a8d4ef72317
security-tracker	www.security-tracker.debian.org/tracker/source-package/ruby-mechanize
ubuntu	www.ubuntu.com/security/CVE-2022-31033
osv	www.osv.dev/vulnerability/GHSA-64qm-hrgp-pgr9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31033
errata	www.errata.altlinux.org/ALT-PU-2023-4274
errata	www.errata.altlinux.org/ALT-PU-2024-7821
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2022-31033
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OA2FJROTX2U6EBWDPKRQ2VAM67A5TQXF

27 Jul 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.9 - 7.5

CVSS 25

EPSS0.00332

SSVC