CVSS 4.0
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, само при определена конфигурация или състояние на системата, без вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain the basic_auth and cookie credentials of a request via a same-host redirect to another scheme or port. With follow_redirect enabled, hackney:follow_redirect/10 in src/hackney.erl reissues the request to the Location target after hackney:maybe_strip_auth_on_redirect/3, which compared only the hostname of the current and the redirect URL. A redirect from https to http on the same host resent the Authorization and Cookie headers in cleartext, where an on-path attacker can read them, and a redirect to another port on the same host handed them to a different service. location_trusted forwards credentials to any target by design and is unchanged. This issue affects hackney: from 2.0.0 before 4.9.0.
Засегнати продукти
- benoitc hackney: 2.0.0 преди 4.9.0
- benoitc hackney: 8f944559bdb83da60b5c06f6cf6d842591278364 преди 6548384b22ea196023a1963e2967d5715b6d9564
Вид слабост
История
- 26 октомври 2026 Публикувано
Други уязвимости в benoitc hackney
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-113440
- https://nvd.nist.gov/vuln/detail/CVE-2026-113440
- https://github.com/benoitc/hackney/pull/979
- https://cna.erlef.org/cves/CVE-2026-113440.html
- https://osv.dev/vulnerability/EEF-CVE-2026-113440
- https://github.com/benoitc/hackney/releases/tag/4.9.0
- https://github.com/benoitc/hackney/commit/8f944559bdb83da60b5c06f6cf6d842591278364
- https://github.com/benoitc/hackney/commit/6548384b22ea196023a1963e2967d5715b6d9564