Information Disclosure

Apache gateway-spi is vulnerable to information disclosure. The vulnerability exists cookie header that is forwarded from knox-cilent to backend as Knox does not exclude the user-knox cookies in cilent outbounf requests by adding in REQUESTEXCLUDEHEADERS where an attacker can successfully trick a...