Miembros de
Boletines de Vulnerabilidades |
CVE-2026-44503 |
|
| Software afectado | MICROSOFT |
| The RedirectHandler middleware in microsoft/kiota-java (com.microsoft.kiota:microsoft-kiota-http-okHttp v1.9.0) and other Kiota libraries fails to strip sensitive HTTP headers when following 3xx redirects to a different host or scheme. Only the Authorization header is removed; Cookie, Proxy-Authorization, and all custom headers are forwarded to the redirect target. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-44503 | |
