CVE-2025-4673
Sensitive headers not cleared on cross-origin redirect in net/http
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Sensitive headers not cleared on cross-origin redirect in net/http
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
Reserved 2025-05-13 | Published 2025-06-11 | Updated 2025-06-11 | Assigner GoCWE-201: Insertion of Sensitive Information Into Sent Data
Takeshi Kaneko (GMO Cybersecurity by Ierae, Inc.)
groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
Support options
