Lucene search
+L

741 matches found

OSV
OSV
added 2022/02/10 12:00 a.m.6 views

GHSA-PW2R-VQ6V-HR8C Exposure of Sensitive Information to an Unauthorized Actor in follow-redirects

Exposure of Sensitive Information to an Unauthorized Actor in NPM follow-redirects prior to 1.14.8...

5.9CVSS7.2AI score0.0126EPSS
SaveExploits0References4
vulnersOsv
vulnersOsv
added 2022/02/10 12:00 a.m.4 views

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42439 more potentially affected by CVE-2022-0536 via follow-redirects (>=1.0.0, <=1.14.7)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0536 Source advisory: OSV:GHSA-PW2R-VQ6V-HR8C...

5.9CVSS6.7AI score0.0126EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/02/09 11:15 a.m.8 views

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.6AI score0.0126EPSS
SaveExploits0References3
OSV
OSV
added 2022/02/09 11:15 a.m.10 views

AZL-45156 CVE-2022-0536 affecting package js-jquery 3.5.0-4

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.7AI score0.0126EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/09 11:15 a.m.4 views

DEBIAN-CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.5AI score0.0126EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/09 11:15 a.m.24 views

Input validation

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

4.3CVSS6.9AI score0.0126EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2022/02/09 11:15 a.m.42 views

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.8AI score0.0126EPSS
SaveExploits0References4
OSV
OSV
added 2022/02/09 11:15 a.m.4 views

UBUNTU-CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.8AI score0.0126EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2022/02/09 10:45 a.m.44 views

CVE-2022-0536

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

5.9CVSS6.9AI score0.0126EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/02/09 12:00 a.m.6 views

PT-2022-13247

Name of the Vulnerable Software and Affected Versions NPM follow-redirects versions prior to 1.14.8 Description The issue is related to the improper removal of sensitive information before storage or transfer, which can lead to exposure of sensitive information to unauthorized actors...

5.9CVSS6.5AI score0.0126EPSS
SaveExploits0References21
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.6 views

Follow Redirects 信息泄露漏洞

Follow Redirects is a Node.js module that automatically follows Https redirects. An information disclosure vulnerability exists in versions of Follow Redirects prior to 1.14.8, which stems from the exposure of sensitive information in NPM to unauthorized participants...

5.9CVSS6.8AI score0.0126EPSS
SaveExploits0References23
Openbugbounty
Openbugbounty
added 2022/01/30 11:21 a.m.15 views

brookemeyerphotography.com Cross Site Scripting vulnerability OBB-2349546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2022/01/24 6:54 p.m.39 views

CVE-2022-0155

A flaw was found in follow-redirects when fetching a remote URL with a cookie when it gets to the Location response header. This flaw allows an attacker to hijack the account as the cookie is leaked...

8CVSS3.6AI score0.02426EPSS
SaveExploits2References4
Github Security Blog
Github Security Blog
added 2022/01/12 10:46 p.m.73 views

Exposure of sensitive information in follow-redirects

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

8CVSS3.4AI score0.02426EPSS
SaveExploits2References5Affected Software1
vulnersOsv
vulnersOsv
added 2022/01/12 10:46 p.m.5 views

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +42435 more potentially affected by CVE-2022-0155 via follow-redirects (>=1.0.0, <=1.14.6)

follow-redirects NPM version =1.0.0, =1.0.1, =1.0.1, =0.0.2, =1.0.0, =1.0.0, =1.0.1 - 123-movies 1.0.0 and more Source cves: CVE-2022-0155 Source advisory: OSV:GHSA-74FJ-2J2H-C42Q...

8CVSS6.8AI score0.02426EPSS
SaveExploits2
OSV
OSV
added 2022/01/12 10:46 p.m.12 views

GHSA-74FJ-2J2H-C42Q Exposure of sensitive information in follow-redirects

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

8CVSS7.2AI score0.02426EPSS
SaveExploits2References5
Veracode
Veracode
added 2022/01/12 3:51 a.m.31 views

Information Disclosure

follow-redirects is vulnerable to information disclosure. The cookie is exposed when the system is fetching a remote url with the redirect...

6.5CVSS1.5AI score0.02426EPSS
SaveExploits2References3Affected Software3
OSV
OSV
added 2022/01/10 8:15 p.m.21 views

AZL-44112 CVE-2022-0155 affecting package js-jquery 3.5.0-4

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

6.5CVSS7.4AI score0.02426EPSS
SaveExploits2References1
NVD
NVD
added 2022/01/10 8:15 p.m.25 views

CVE-2022-0155

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

8CVSS0.02426EPSS
SaveExploits2References3
OSV
OSV
added 2022/01/10 8:15 p.m.3 views

DEBIAN-CVE-2022-0155

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor...

6.5CVSS7.5AI score0.02426EPSS
SaveExploits2References1
Rows per page
Query Builder