En bref
- CVE-2019-11284 est une vulnérabilité ÉLEVÉE (CVSS 8.6) touchant io.projectreactor.netty:reactor-netty, reactor netty (broadcom).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.90%, plus élevée que 59.7% des vulnérabilités.
- Correctif : mettre à jour vers 0.8.11 ou plus récent.
Description
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
NVD description
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
Autres vulnérabilités de io.projectreactor.netty:reactor-netty
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free