{"id":1412,"date":"2025-04-24T09:32:54","date_gmt":"2025-04-24T09:32:54","guid":{"rendered":"http:\/\/localhost\/?p=1412"},"modified":"2025-04-24T09:32:54","modified_gmt":"2025-04-24T09:32:54","slug":"cve-2025-46421-libsoup-information-disclosure-may-leads-libsoup-client-sends-authorization-header-to","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=1412","title":{"rendered":"CVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server"},"content":{"rendered":"
\n

Vulnerability Details<\/h2>\n
\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nCVE-2025-46421 Libsoup: information disclosure may leads libsoup client sends authorization header to a different host when being redirected by a server<\/td>\n<\/tr>\n
Type<\/th>\nvulnrichment<\/td>\n<\/tr>\n
Published<\/th>\n2025-04-24T13:01:24<\/td>\n<\/tr>\n
Last Seen<\/th>\n2025-04-24T14:26:15<\/td>\n<\/tr>\n
CVSS Score<\/th>\n6.8 (MEDIUM)<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVSS v3 Details<\/h3>\n\n\n\n\n\n\n\n\n\n
Attack Vector<\/th>\nNETWORK<\/td>\n<\/tr>\n
Attack Complexity<\/th>\nHIGH<\/td>\n<\/tr>\n
Privileges Required<\/th>\nNONE<\/td>\n<\/tr>\n
User Interaction<\/th>\nREQUIRED<\/td>\n<\/tr>\n
Scope<\/th>\nUNCHANGED<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\nHIGH<\/td>\n<\/tr>\n
Integrity Impact<\/th>\nHIGH<\/td>\n<\/tr>\n
Availability Impact<\/th>\nNONE<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVE Information<\/h3>\n\n\n\n\n
CVE IDs<\/th>\nCVE-2025-46421<\/td>\n<\/tr>\n
CWE<\/th>\nCWE-497<\/td>\n<\/tr>\n
Bulletin Family<\/th>\ncve<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

Description<\/h3>\n
\n A flaw was found in libsoup. When libsoup clients encounter an HTTP redirect, they mistakenly send the HTTP Authorization header to the new host that the redirection points to. This allows the new host to impersonate the user to the original host that issued the redirect.\n <\/div>\n<\/p><\/div>\n
\n

Impact Assessment<\/h3>\n\n\n\n
Base Score<\/th>\n6.8<\/td>\n<\/tr>\n
Severity<\/th>\nMEDIUM<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

View full CVE details<\/a><\/p>\n<\/p><\/div>\n<\/div>\n