net-http-cookiejar up to 1.21.7/1.22.0 on Go HTTP Header information disclosure

Summaryinfo

A vulnerability, which was classified as problematic, has been found in net-http-cookiejar up to 1.21.7/1.22.0 on Go. Affected is an unknown function of the component HTTP Header Handler. Performing a manipulation results in information disclosure. This vulnerability is reported as CVE-2023-45289. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, was found in net-http-cookiejar up to 1.21.7/1.22.0 on Go. This affects an unknown functionality of the component HTTP Header Handler. The manipulation with an unknown input leads to a information disclosure vulnerability. CWE is classifying the issue as CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. This is going to have an impact on confidentiality. The summary by CVE is:

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.

The weakness was disclosed 03/06/2024. This vulnerability is uniquely identified as CVE-2023-45289 since 10/06/2023. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 209811 (SUSE SLED15 / SLES15 / openSUSE 15 Security Update : go1.21-openssl (SUSE-SU-2024:3755-1)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.21.8 or 1.22.1 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (209811). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• net-http-cookiejar

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.11
• 1.12
• 1.13
• 1.14
• 1.15
• 1.16
• 1.17
• 1.18
• 1.19
• 1.20
• 1.21
• 1.21.0
• 1.21.1
• 1.21.2
• 1.21.3
• 1.21.4
• 1.21.5
• 1.21.6
• 1.21.7
• 1.22.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion