CVE-2022-31033

RubyGems/mechanize CVE-2022-31033: medium 5.9, EPSS 1.50%

Mechanize before v2.8.5 vulnerable to authorization header leak on port redirect

Action: Upgrade mechanize to 2.8.5 or later.

bundle update mechanize

Affected

Fixed versions

Sources

• osv: GHSA-64qm-hrgp-pgr9
• https://github.com/sparklemotion/mechanize/security/advisories/GHSA-64qm-hrgp-pgr9
• https://nvd.nist.gov/vuln/detail/CVE-2022-31033
• https://github.com/sparklemotion/mechanize/commit/c7fe6996a5b95f9880653ba3bc548a8d4ef72317
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/mechanize/CVE-2022-31033.yml
• https://github.com/sparklemotion/mechanize

CVE-2022-31033 · published 2022-06-09T23:47:57Z · modified 2023-11-08T04:09:23.331413Z · JSON