H1-3680038 — Vulnetix

H1-3680038 PUBLISHED

Digest Auth State Leak on Cross-Origin Redirect via Netrc - Username and Password Hash Sent to Wrong Host

Exploit Intelligence

Digest Auth State Leak on Cross-Origin Redirect via Netrc - Username and Password Hash Sent to Wrong Host (hackerone)
Digest Auth State Leak on Cross-Origin Redirect via Netrc - Username and Password Hash Sent to Wrong Host (hackerone)

Timeline

Apr 19, 2026 CVE Published
Apr 19, 2026 PoC Published

References

Digest Auth State Leak on Cross-Origin Redirect via Netrc - Username and Password Hash Sent to Wrong Host advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›