En resumen
- CVE-2025-22227 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a io.projectreactor.netty:reactor-netty-http.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.40%, mayor que el 34.8% de las vulnerabilidades.
- Solución: actualizar a 1.3.0-M5, 1.2.8 o posterior.
Description
In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
NVD description
In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
Más vulnerabilidades de io.projectreactor.netty:reactor-netty-http
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free