CyberRota Analysis
AI-GeneratedRclone versions prior to 1.75.0 are vulnerable to transport downgrade attacks during redirect handling, which can lead to the exposure of Basic authorization and Cookie headers over unencrypted HTTP. This allows an on-path attacker to capture and replay credentials, potentially enabling unauthorized WebDAV operations with the affected account's permissions. Organizations using rclone for file synchronization or cloud storage should prioritize this vulnerability to mitigate the risk of credential theft and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rclone versions before v1.75.0 fail to reject transport downgrades in redirect handling, allowing Basic authorization and Cookie headers to be replayed over plaintext HTTP after same-host HTTPS-to-HTTP redirects. An on-path attacker observing the plaintext hop can capture and reuse credentials to perform WebDAV operations with the compromised account's permissions.