Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/09/17 5:19 p.m.•26 views

AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target

Impact A client configured with a client-wide realm a Realm set on the config builder rather than on an individual request and following redirects could re-send those credentials to a redirect target on a different origin. The redirect code strips the per-exchange realm, but when the target...

6.8CVSS5.8AI score0.0053EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder