Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/08/17 9:57 p.m.9 views

http4k: `DigestAuthProvider.verify` did not bind to request URI

Impact An issue in DigestAuthProvider.verify: The uri parameter in the client's Authorization: Digest … response was not checked against the actual request URL. A captured Digest authentication response could be replayed against any other URL served by the same realm, breaking the per-request-URL...

5.4AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder