CVE-2026-47070

Katalog CVE

CVSS 6.1 · Medium EPSS 0,35%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada benoitc hackney. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data. The HTTP/3 redirect handler in src/hackney_h3.erl passes the original request headers unchanged to the redirect target without performing any cross-origin check. When a client issues an HTTP/3 request with follow_redirect enabled and includes Authorization or Cookie headers, a server responding with a 3xx redirect to a different host will cause the client to forward those credentials verbatim to the new origin. The main hackney.erl module has maybe_strip_auth_on_redirect/2 (guarded by the location_trusted option) to address CVE-2018-1000007, but hackney_h3.erl is missing this protection entirely. This issue affects hackney: from 3.1.1 before 4.0.1.

Rincian

Terbit di NVD

25 Mei 2026

Terakhir diubah

24 Juli 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/benoitc/hackney/security/advisories/GHSA-h73q-4w9q-82h4 exploit · patch · advisory vendor
• https://cna.erlef.org/cves/CVE-2026-47070.html patch · advisory pihak ketiga
• https://github.com/benoitc/hackney/commit/c58d5b50bade146360b85caf3dc8065807b08246 patch
• https://osv.dev/vulnerability/EEF-CVE-2026-47070 patch · advisory pihak ketiga