CVE-2022-0155 HIGH

CVE-2022-0155: Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

Vendor Follow-Redirects
Product follow-redirects/follow-redirects
Weakness CWE-359
Published January 10, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

8.0/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

Key dates

02Disclosure timeline

January 10, 2022 CVE published
August 2, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-26041 Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured CVE-2022-0852 CVE-2024-53258 download_all_submissions allows student to download another student's submissions in Autolab CVE-2024-10267 Information Disclosure in transformeroptimus/superagi CVE-2025-10450 Exposure of Private Personal Information to an Unauthorized Actor vulnerability in RTI Connext Professional (Core Libraries) allows Sniffing Network Traffic.