What is GHSA-74fj-2j2h-c42q?

GHSA-74fj-2j2h-c42q is a security advisory published by GitHub Security Advisories with High severity. Exposure of sensitive information in follow-redirects

Which CVE IDs does GHSA-74fj-2j2h-c42q cover?

GHSA-74fj-2j2h-c42q covers the following CVE IDs: CVE-2022-0155. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-74fj-2j2h-c42q?

GHSA-74fj-2j2h-c42q has a CVSS v3 base score of 8.0, published by GitHub Security Advisories.

Which products are affected by GHSA-74fj-2j2h-c42q?

GHSA-74fj-2j2h-c42q affects 1 product, including: npm/follow-redirects:\u003c 1.14.7.

GHSA-74fj-2j2h-c42qHighCVSS 8.0

Exposure of sensitive information in follow-redirects

Vendor

GitHub Security Advisories

Published

January 12, 2022

Last Modified

February 12, 2025

🔗 CVE IDs covered (1)

CVE-2022-0155 →

📋 Description

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

🎯 Affected products1

npm/follow-redirects:< 1.14.7

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-0155
https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22
https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406
https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf
https://github.com/advisories/GHSA-74fj-2j2h-c42q