Linux Distros Unpatched Vulnerability : CVE-2022-31033

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, and can follow link...

CVE-2022-31033

creationtimestamp| type| source ---|---|--- 2022-06-10 00:33:42+00:00| seen| https://t.me/cibsecurity/44150...

CVE-2022-31033 Authorization header leak in rubygem Mechanize

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, and can follow links and submit forms. In versions prior to 2.8.5 the Authorization header is leaked after a redirect to a different port on the same site...

CVE-2022-31033 Authorization header leak in rubygem Mechanize

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, and can follow links and submit forms. In versions prior to 2.8.5 the Authorization header is leaked after a redirect to a different port on the same site...

CVE-2022-31033

CVE-2022-31033 affects the Ruby gem Mechanize. In versions prior to 2.8.5, the Authorization header may be leaked after a redirect to a different port on the same site, exposing sensitive credentials. The issue is mitigated by upgrading to Mechanize v2.8.5 or later. Public sources in the provided...