Lucene search
Veracode Vulnerability DatabaseVERACODE:25139HistoryApr 30, 2020 - 1:44 a.m.
Information Disclosure
2020-04-3001:44:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.002 Low
EPSS
Percentile
52.1%
@actions/http-client is vulnerable to information disclosure. When a request that results in a 302 redirect contains a Authorization header, the credentials is disclosed to the other domain.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @actions/http-client | le | 1.0.7 |
Related
osv
osv
CVE-2020-11021
2020-04-29 18:15:13
prion
prion
Authorization
2020-04-29 18:15:00
nvd
nvd
CVE-2020-11021
2020-04-29 18:15:13
githubexploit
githubexploit
Exploit for Vulnerability in Http-Client Project Http-Client
2020-12-01 09:45:48
gitlab
gitlab
Information Exposure
2020-04-29 00:00:00
cve
cve
CVE-2020-11021
2020-04-29 18:15:13
github
github
cvelist
cvelist