CVE-2022-0155

CVE-2022-0155 · Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects

This page contains facts from public vulnerability sources. Check the original advisory before updating.

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

CVSS 8.0 · High · EPSS 2.4% · Fix available

Stack: system · node

Affected products and versions

follow-redirects/follow-redirects
Versions
- ≥ unspecified, < 1.14.7: Affected (custom)
Update to 1.14.7
node-follow-redirects Debian:12
Affected ranges
- ECOSYSTEM: < 1.14.7+~1.13.1-1
Update to 1.14.7+~1.13.1-1
node-follow-redirects Debian:13
Affected ranges
- ECOSYSTEM: < 1.14.7+~1.13.1-1
Update to 1.14.7+~1.13.1-1
node-follow-redirects Debian:14
Affected ranges
- ECOSYSTEM: < 1.14.7+~1.13.1-1
Update to 1.14.7+~1.13.1-1
follow-redirects npm
Affected ranges
- SEMVER: < 1.14.7
Update to 1.14.7
node-follow-redirects Ubuntu:Pro:18.04:LTS
Versions
- 1.2.4-1
Affected ranges
- ECOSYSTEM: < 1.2.4-1ubuntu0.18.04.1~esm1
Update to 1.2.4-1ubuntu0.18.04.1~esm1
node-follow-redirects Ubuntu:Pro:20.04:LTS
Versions
- 1.2.4-1
Affected ranges
- ECOSYSTEM: < 1.2.4-1ubuntu0.20.04.1~esm1
Update to 1.2.4-1ubuntu0.20.04.1~esm1