H1-2352957 — Vulnetix

H1-2352957 PUBLISHED

Proxy-Authorization header is not cleared in cross-domain redirect in undici

Exploit Intelligence

Proxy-Authorization header is not cleared in cross-domain redirect in undici (hackerone)
Proxy-Authorization header is not cleared in cross-domain redirect in undici (hackerone)

Timeline

Mar 12, 2024 CVE Published
Mar 12, 2024 PoC Published

References

Proxy-Authorization header is not cleared in cross-domain redirect in undici advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›