CyberRota Analysis
AI-GeneratedA vulnerability in libsoup allows the Proxy-Authorization header to be improperly attached to subsequent HTTPS requests after establishing a CONNECT tunnel via an HTTP proxy. This flaw can lead to the unintended disclosure of proxy credentials to the destination server, posing a risk of sensitive information exposure. Organizations utilizing libsoup in their applications should prioritize addressing this issue to mitigate potential credential leaks.
Original NVD Description
A flaw was found in libsoup. After a CONNECT tunnel is established through an HTTP proxy, libsoup incorrectly attaches the Proxy-Authorization header to subsequent HTTPS requests sent through that tunnel to the destination server. This allows the destination server to capture proxy credentials, leading to information disclosure.