CyberRota Analysis
AI-GeneratedThe linuxfabrik-lib Python modules for database access and API integrations are vulnerable to improper handling of cross-origin redirects, which can expose sensitive headers like X-Auth-Token to malicious servers. This vulnerability primarily affects users who have not upgraded to version 6.0.0, as it allows attackers to exploit authenticated requests. Organizations utilizing this library should prioritize updating to the latest version to mitigate the risk of credential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 6.0.0, lib.url.fetch() followed cross-origin redirects while forwarding caller-supplied credential headers other than Authorization and Cookie, allowing a malicious redirect-capable server to receive headers such as X-Auth-Token from authenticated monitoring requests. This issue is fixed in version 6.0.0.