Lucene search
Veracode Vulnerability DatabaseVERACODE:22602HistoryFeb 29, 2020 - 11:49 p.m.
Information Disclosure
2020-02-2923:49:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
35.3%
reactor.netty is vulnerable to information disclosure. The followRedirect functions does not properly handle the redirect request, leading to a credential leakage if a redirect to different domain is based on the incorrect configuration.
Related
github
github
Insufficiently Protected Credentials in Reactor Netty
2022-02-10 20:24:17
nvd
nvd
CVE-2020-5404
2020-03-03 18:15:12
redhatcve
redhatcve
CVE-2020-5404
2021-06-23 08:25:53
osv
osv
Insufficiently Protected Credentials in Reactor Netty
2022-02-10 20:24:17
CVE-2020-5404
2020-03-03 18:15:12
prion
prion
Buffer overflow
2020-03-03 18:15:00
cvelist
cvelist
CVE-2020-5404 Authentication Leak On Redirect With Reactor Netty HttpClient
2020-03-03 17:55:13
cve
cve
CVE-2020-5404
2020-03-03 18:15:12
redhat
redhat
(RHSA-2022:8761) Moderate: Red Hat support for Spring Boot 2.7.2 update
2022-12-14 13:14:18