CVE-2022-0536

Related Vulnerabilities: CVE-2022-0536  

Exposure of Sensitive Information to an Unauthorized Actor in NPM follow-redirects prior to 1.14.8.

Description

The MITRE CVE dictionary describes this issue as:

Exposure of Sensitive Information to an Unauthorized Actor in NPM follow-redirects prior to 1.14.8.

Additional Information

  • Bugzilla 2053259: CVE-2022-0536 follow-redirects: Exposure of Sensitive Information via Authorization Header leak
  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • FAQ: Frequently asked questions about CVE-2022-0536