CyberRota Analysis
AI-GeneratedHTTP::Tiny versions prior to 0.095 for Perl are vulnerable to improper handling of credential headers during cross-origin redirects, allowing sensitive information such as `Authorization`, `Cookie`, and `Proxy-Authorization` headers to be forwarded to potentially malicious targets. This flaw can lead to credential leakage, especially when redirects downgrade from HTTPS to HTTP, exposing data in plaintext. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access and data breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets. When the server returns a 3xx redirect, `_maybe_redirect` follows the `Location:` header and `_prepare_headers_and_cb` re-merges the caller's `headers` argument into the new request, without checking whether the redirect target shares an origin with the original URL. Caller-supplied `Authorization`, `Cookie` and `Proxy-Authorization` headers are therefore re-sent to whatever host the redirect names, across scheme, host or port boundaries, and including `https` to `http` downgrades that expose them in plaintext on the wire. The HTTP::Tiny POD note that "Authorization headers will not be included in a redirected request" applied only to the URL-userinfo Basic-auth path, not to headers passed explicitly by the caller.