CVE-2018-25091

Summary

CVE-2018-25091 is a vulnerability in urllib3 before version 1.24.2. This issue arises when the library fails to remove the authorization HTTP header during cross-origin redirects. As a result, sensitive credentials can be exposed to unintended parties or transmitted in plaintext. It is important to note that this flaw is a consequence of an incomplete fix for a previous vulnerability, CVE-2018-20060.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.