1 matches found
AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target
Impact A client configured with a client-wide realm a Realm set on the config builder rather than on an individual request and following redirects could re-send those credentials to a redirect target on a different origin. The redirect code strips the per-exchange realm, but when the target...
6.8CVSS5.8AI score0.0053EPSS
SaveExploits0References5Affected Software1
20