4 matches found
CVE-2025-21620
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Deno'sfetch redirect handling creates a follow-up redirect request that keeps the original...
CVE-2025-21620
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Deno'sfetch redirect handling creates a follow-up redirect request that keeps the original...
CVE-2025-21620
creationtimestamp| type| source ---|---|--- 2025-01-06 22:28:57+00:00| seen| https://infosec.exchange/users/cve/statuses/113783769484392065 2025-01-06 22:36:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/260 2025-01-06 23:15:40+00:00| seen|...
CVE-2025-21620 Deno's authorization headers not dropped when redirecting cross-origin
Deno is a JavaScript, TypeScript, and WebAssembly runtime with secure defaults. When you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Deno'sfetch redirect handling creates a follow-up redirect request that keeps the original...