CVE-2022-0155

Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

Published Jan 10, 2022 CVSS 3.1 · 6.5 Medium EPSS 2.6% KEV · Not listed
Description
follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-0494 follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor
Github GHSA Github GHSA GHSA-74fj-2j2h-c42q Exposure of sensitive information in follow-redirects
Ubuntu USN Ubuntu USN USN-8217-1 follow-redirects vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.2::el7
cpe:/a:redhat:acm:2.4::el8
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.2::el8
cpe:/a:redhat:acm:2.4::el8
Weaknesses

Sources

Status
PUBLISHED
Assigner
@huntrdev
Published
Updated
Aug 2, 2024, 11:18 PM
Reserved
Jan 7, 2022, 12:00 AM
Status
Modified
Published
Jan 10, 2022, 8:15 PM
Modified
Jun 17, 2026, 4:20 AM
Severity
Moderate
Public date
Jan 10, 2022, 12:00 AM