Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/06/26 10:23 p.m.•28 views

@microsoft/kiota-http-fetchlibrary: Bearer token and Cookie leak across origin on redirect due to case-mismatched scrub in fetchRequestAdapter

Summary @microsoft/kiota-http-fetchlibrary's RedirectHandler is documented as stripping Authorization and Cookie from cross-origin redirect targets, but the default scrubSensitiveHeaders callback in RedirectHandlerOptions uses case-sensitive property deletion delete headers.Authorization, delete...

6.9CVSS5.7AI score0.01178EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder