CVE-2019-11284

creationtimestamp| type| source ---|---|--- 2024-01-16 12:37:02+00:00| seen| https://t.me/ctinow/168777...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.0, <=0.5.5) +463 more potentially affected by CVE-2019-11284 via io.projectreactor.netty:reactor-netty (>=0.8.0.release, <=0.8.10.release)

io.projectreactor.netty:reactor-netty MAVEN version =0.8.0.release, =0.5.0, =0.5.0, =0.5.0, =2.1.2.release, =3.1.85, =3.1.37, =3.1.13, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.97 and more Source cves: CVE-2019-11284 Source advisory: GHSA-J52R-XC68-Q8F4...

ai.hyacinth.framework:core-service-admin-server (>=0.5.0, <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.0, <=0.5.5) +463 more potentially affected by CVE-2019-11284 via io.projectreactor.netty:reactor-netty (>=0.8.0.release, <=0.8.10.release)

io.projectreactor.netty:reactor-netty MAVEN version =0.8.0.release, =0.5.0, =0.5.0, =0.5.0, =2.1.2.release, =3.1.85, =3.1.37, =3.1.13, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.85, =3.1.97 and more Source cves: CVE-2019-11284 Source advisory: OSV:GHSA-J52R-XC68-Q8F4...

CVE-2019-11284

Affected software: Pivotal Reactor Netty (versions prior to 0.8.11). Vulnerability: redirects pass headers, including Authorization headers. Impact: remote unauthenticated attacker may access credentials for a different server. Root cause: headers leaked via redirects. Remediation: not specified ...