CVE-2026-1539: Libsoup: güvenlik açığı

Açıklama (NVD)

A flaw was found in the libsoup HTTP library that can cause proxy authentication credentials to be sent to unintended destinations. When handling HTTP redirects, libsoup removes the Authorization header but does not remove the Proxy-Authorization header if the request is redirected to a different host. As a result, sensitive proxy credentials may be leaked to third-party servers. Applications using libsoup for HTTP communication may unintentionally expose proxy authentication data.

Özet bilgiler

Ürün

Gnome Libsoup

CVSS v3.1

5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS

%0,27 (yüzdelik 20)

CWE

CWE-201

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• access.redhat.com
• gitlab.gnome.org
• CWE-201