Skip to content
OpenAdvisories

Package · Debian

libwww-perl

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects

    LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects. On a 3xx response, the redirect handler strips only Host and Cookie before issuing the follow-up request. Caller-supplied Authorization …