PT-2025-2689

🗓️ 16 Jan 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 18 Views

Google Go versions before 1.22.10 and 1.23.4 drop sensitive headers on cross-domain redirects.

Reporter	Title	Published	Views	Family All 10927
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in podman affects IBM Netezza Appliance	27 Apr 202613:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities	20 Feb 202419:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson CP4D Data Stores is vulnerable to Golang Go Information disclosure vulnerabilitiy.(CVE-2023-39326)	21 Jun 202415:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GoLang Go and Kubernetes affect IBM watsonx.data	18 Sep 202416:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to denial of service due to Golang Go ( CVE-2023-24534 )	29 Jan 202521:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Golang Go (CVE-2023-24534)	27 Jul 202317:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm

Source	Link
suse	www.suse.com/security/cve/CVE-2025-24030
bugzilla	www.bugzilla.redhat.com/2341750
lists	www.lists.opensuse.org/archives/list/[email protected]/thread/Q3ZTZP3RXZGJRRPGSFEUWJMYPA5WPOPW
suse	www.suse.com/security/cve/CVE-2024-36402
openwall	www.openwall.com/lists/oss-security/2025/01/17/1
suse	www.suse.com/security/cve/CVE-2025-22867
suse	www.suse.com/security/cve/CVE-2025-47907
access	www.access.redhat.com/errata/RHSA-2025:3772
redhat	www.redhat.com/security/data/cve/CVE-2024-45336.html
cve	www.cve.org/CVERecord

18 Feb 2026 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.4

CVSS 3.19.8 - 10

CVSS 48.7

CVSS 37.1

EPSS0.0263

SSVC