CVE-2019-11284

creationtimestamp| type| source ---|---|--- 2024-01-16 12:37:02+00:00| seen| https://t.me/ctinow/168777...

ai.hyacinth.framework:core-service-admin-server (>=0.5.2 <=0.5.5), ai.hyacinth.framework:core-service-gateway-server (>=0.5.2 <=0.5.5) +198 more potentially affected by CVE-2019-11284 via io.projectreactor.netty:reactor-netty (>=0.8.0.RELEASE <=0.8.10.RELEASE)

io.projectreactor.netty:reactor-netty MAVEN version =0.8.0.RELEASE, =0.5.2, =0.5.2, =0.5.2, =0.0.3, =0.0.9 and more Source cves: CVE-2019-11284 Source advisory: OSV:GHSA-J52R-XC68-Q8F4...

CVE-2019-11284

Affected software: Pivotal Reactor Netty (versions prior to 0.8.11). Vulnerability: redirects pass headers, including Authorization headers. Impact: remote unauthenticated attacker may access credentials for a different server. Root cause: headers leaked via redirects. Remediation: not specified ...