CVE-2022-0155CWE-359

Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

High · published January 10, 2022

CVSS v3.0
8.0
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

The record
Technical detail
CVSS v3.0
8.0 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02426 · 84.1th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2022-01-10T19:30Z
EPSS history
Timeline
  • 10 JAN 19:30Z
    Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects
    cvelistv5