high8.6
CVE-2019-11284
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones.
Impact
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Broadcom | Reactor Netty | from 0.8.0 before 0.8.11 |