en Se connecter

6.8 Moyenne

CVE-2025-4673 Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive…

Description

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
net/http 1.24	1.24.0-0 → < 1.24.4	1.24.4
net/http 1.23	premières → < 1.23.10	1.23.10

Références

go.dev go.dev
go.dev go.dev
groups.google.com groups.google.com
pkg.go.dev pkg.go.dev

Chronologie

Publiée 11 juin 2025
Dernière modification 11 juin 2025

Les 26 CVE de net/http →

CVE-2026-97032 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently 7.5 Élevée CVE-2026-78663 The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream… 9.1 Critique CVE-2026-78669 A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams… 7.5 Élevée CVE-2026-78667 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS)… 7.5 Élevée

Suivre cette CVE