[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2024-28849":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-04T03:50:50.655Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":1074,"aliases":1084,"duplicate_of":9,"upstream":1087,"downstream":1088,"duplicates":1100,"related":1101,"reserved_at":9,"published_at":1121,"modified_at":1122,"state":1123,"summary":1124,"references_raw":1132,"kevs":1188,"epss":1189,"epss_history":1192,"metrics":1453,"affected":1465},"CVE-2024-28849","follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects. In affected versions follow-redirects only clears authorization header during cross-domain redirect, but keep the proxy-authentication header which contains credentials too. This vulnerability may lead to credentials leak, but has been addressed in version 1.15.6. Users are advised to upgrade. There are no known workarounds for this vulnerability.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-200","Exposure of Sensitive Information to an Unauthorized Actor","The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","weakness","Draft","Class","High",[20,24,208,234,238,242,246,250,254,258,348,352,356,378,382,386,390,394,404,408,412,416,420,424,428,432,436,500,504,530,552,556,560,564,568,572,576,580,584,588,592,596,600,604,608,612,644,648,670,692,738,764,864,868,993,1030,1040,1050,1070],{"id":21,"name":22,"techniques":23},"CAPEC-116","Excavation",[],{"id":25,"name":26,"techniques":27},"CAPEC-13","Subverting Environment Variable Values",[28,126,168],{"id":29,"name":30,"tactics":31,"countermeasures":38},"T1562.003","Impair Command History Logging",[32,35],{"id":33,"name":34},"TA0030","Defense Evasion",{"id":36,"name":37},"TA0005","Stealth",[39,44,49,54,59,64,69,73,77,81,85,90,94,98,102,106,110,114,118,122],{"id":40,"name":41,"tactic":42},"D3-RF","Restore File",{"name":43},"Restore",{"id":45,"name":46,"tactic":47},"D3-CQ","Content Quarantine",{"name":48},"Isolate",{"id":50,"name":51,"tactic":52},"D3-CI","Configuration Inventory",{"name":53},"Model",{"id":55,"name":56,"tactic":57},"D3-DF","Decoy File",{"name":58},"Deceive",{"id":60,"name":61,"tactic":62},"D3-FA","File Analysis",{"name":63},"Detect",{"id":65,"name":66,"tactic":67},"D3-DRA","Disable Remote Access",{"name":68},"Harden",{"id":70,"name":71,"tactic":72},"D3-ACH","Application Configuration Hardening",{"name":68},{"id":74,"name":75,"tactic":76},"D3-RC","Restore Configuration",{"name":43},{"id":78,"name":79,"tactic":80},"D3-FE","File Encryption",{"name":68},{"id":82,"name":83,"tactic":84},"D3-FIM","File Integrity Monitoring",{"name":63},{"id":86,"name":87,"tactic":88},"D3-RKD","Registry Key Deletion",{"name":89},"Evict",{"id":91,"name":92,"tactic":93},"D3-DA","Dynamic Analysis",{"name":63},{"id":95,"name":96,"tactic":97},"D3-CF","Content Filtering",{"name":48},{"id":99,"name":100,"tactic":101},"D3-LFP","Local File Permissions",{"name":48},{"id":103,"name":104,"tactic":105},"D3-FEV","File Eviction",{"name":89},{"id":107,"name":108,"tactic":109},"D3-EFA","Emulated File Analysis",{"name":63},{"id":111,"name":112,"tactic":113},"D3-RFAM","Remote File Access Mediation",{"name":48},{"id":115,"name":116,"tactic":117},"D3-CM","Content Modification",{"name":48},{"id":119,"name":120,"tactic":121},"D3-EAL","Executable Allowlisting",{"name":48},{"id":123,"name":124,"tactic":125},"D3-EDL","Executable Denylisting",{"name":48},{"id":127,"name":128,"tactics":129,"countermeasures":141},"T1574.006","Dynamic Linker Hijacking",[130,133,136,137,138],{"id":131,"name":132},"TA0110","Persistence",{"id":134,"name":135},"TA0111","Privilege Escalation",{"id":33,"name":34},{"id":36,"name":37},{"id":139,"name":140},"TA0104","Execution",[142,144,146,148,152,154,156,158,160,162,164,166],{"id":115,"name":116,"tactic":143},{"name":48},{"id":103,"name":104,"tactic":145},{"name":89},{"id":60,"name":61,"tactic":147},{"name":63},{"id":149,"name":150,"tactic":151},"D3-SFA","System File Analysis",{"name":63},{"id":40,"name":41,"tactic":153},{"name":43},{"id":95,"name":96,"tactic":155},{"name":48},{"id":99,"name":100,"tactic":157},{"name":48},{"id":78,"name":79,"tactic":159},{"name":68},{"id":111,"name":112,"tactic":161},{"name":48},{"id":45,"name":46,"tactic":163},{"name":48},{"id":55,"name":56,"tactic":165},{"name":58},{"id":82,"name":83,"tactic":167},{"name":63},{"id":169,"name":170,"tactics":171,"countermeasures":177},"T1574.007","Path Interception by PATH Environment Variable",[172,173,174,175,176],{"id":131,"name":132},{"id":134,"name":135},{"id":33,"name":34},{"id":36,"name":37},{"id":139,"name":140},[178,180,182,184,186,188,190,192,194,196,198,200,202,204,206],{"id":115,"name":116,"tactic":179},{"name":48},{"id":60,"name":61,"tactic":181},{"name":63},{"id":55,"name":56,"tactic":183},{"name":58},{"id":95,"name":96,"tactic":185},{"name":48},{"id":103,"name":104,"tactic":187},{"name":89},{"id":82,"name":83,"tactic":189},{"name":63},{"id":99,"name":100,"tactic":191},{"name":48},{"id":78,"name":79,"tactic":193},{"name":68},{"id":119,"name":120,"tactic":195},{"name":48},{"id":91,"name":92,"tactic":197},{"name":63},{"id":111,"name":112,"tactic":199},{"name":48},{"id":123,"name":124,"tactic":201},{"name":48},{"id":107,"name":108,"tactic":203},{"name":63},{"id":45,"name":46,"tactic":205},{"name":48},{"id":40,"name":41,"tactic":207},{"name":43},{"id":209,"name":210,"techniques":211},"CAPEC-169","Footprinting",[212,220,228],{"id":213,"name":214,"tactics":215,"countermeasures":219},"T1217","Browser Information Discovery",[216],{"id":217,"name":218},"TA0102","Discovery",[],{"id":221,"name":222,"tactics":223,"countermeasures":227},"T1592","Gather Victim Host Information",[224],{"id":225,"name":226},"TA0043","Reconnaissance",[],{"id":229,"name":230,"tactics":231,"countermeasures":233},"T1595","Active Scanning",[232],{"id":225,"name":226},[],{"id":235,"name":236,"techniques":237},"CAPEC-22","Exploiting Trust in Client",[],{"id":239,"name":240,"techniques":241},"CAPEC-224","Fingerprinting",[],{"id":243,"name":244,"techniques":245},"CAPEC-285","ICMP Echo Request Ping",[],{"id":247,"name":248,"techniques":249},"CAPEC-287","TCP SYN Scan",[],{"id":251,"name":252,"techniques":253},"CAPEC-290","Enumerate Mail Exchange (MX) Records",[],{"id":255,"name":256,"techniques":257},"CAPEC-291","DNS Zone Transfers",[],{"id":259,"name":260,"techniques":261},"CAPEC-292","Host Discovery",[262],{"id":263,"name":264,"tactics":265,"countermeasures":267},"T1018","Remote System Discovery",[266],{"id":217,"name":218},[268,270,274,278,282,286,290,292,294,296,298,300,302,304,306,308,312,314,316,320,324,328,332,336,338,342,346],{"id":123,"name":124,"tactic":269},{"name":48},{"id":271,"name":272,"tactic":273},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":63},{"id":275,"name":276,"tactic":277},"D3-SCF","System Call Filtering",{"name":48},{"id":279,"name":280,"tactic":281},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":63},{"id":283,"name":284,"tactic":285},"D3-SCA","System Call Analysis",{"name":63},{"id":287,"name":288,"tactic":289},"D3-NTF","Network Traffic Filtering",{"name":48},{"id":78,"name":79,"tactic":291},{"name":68},{"id":103,"name":104,"tactic":293},{"name":89},{"id":99,"name":100,"tactic":295},{"name":48},{"id":111,"name":112,"tactic":297},{"name":48},{"id":95,"name":96,"tactic":299},{"name":48},{"id":60,"name":61,"tactic":301},{"name":63},{"id":149,"name":150,"tactic":303},{"name":63},{"id":82,"name":83,"tactic":305},{"name":63},{"id":115,"name":116,"tactic":307},{"name":48},{"id":309,"name":310,"tactic":311},"D3-CSPP","Client-server Payload Profiling",{"name":63},{"id":40,"name":41,"tactic":313},{"name":43},{"id":45,"name":46,"tactic":315},{"name":48},{"id":317,"name":318,"tactic":319},"D3-APCA","Application Protocol Command Analysis",{"name":63},{"id":321,"name":322,"tactic":323},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":63},{"id":325,"name":326,"tactic":327},"D3-RTSD","Remote Terminal Session Detection",{"name":63},{"id":329,"name":330,"tactic":331},"D3-HBPI","Hardware-based Process Isolation",{"name":48},{"id":333,"name":334,"tactic":335},"D3-NTCD","Network Traffic Community Deviation",{"name":63},{"id":55,"name":56,"tactic":337},{"name":58},{"id":339,"name":340,"tactic":341},"D3-NTSA","Network Traffic Signature Analysis",{"name":63},{"id":343,"name":344,"tactic":345},"D3-PSA","Process Spawn Analysis",{"name":63},{"id":119,"name":120,"tactic":347},{"name":48},{"id":349,"name":350,"techniques":351},"CAPEC-293","Traceroute Route Enumeration",[],{"id":353,"name":354,"techniques":355},"CAPEC-294","ICMP Address Mask Request",[],{"id":357,"name":358,"techniques":359},"CAPEC-295","Timestamp Request",[360],{"id":361,"name":362,"tactics":363,"countermeasures":365},"T1124","System Time Discovery",[364],{"id":217,"name":218},[366,368,370,372,374,376],{"id":283,"name":284,"tactic":367},{"name":63},{"id":119,"name":120,"tactic":369},{"name":48},{"id":343,"name":344,"tactic":371},{"name":63},{"id":275,"name":276,"tactic":373},{"name":48},{"id":123,"name":124,"tactic":375},{"name":48},{"id":329,"name":330,"tactic":377},{"name":48},{"id":379,"name":380,"techniques":381},"CAPEC-296","ICMP Information Request",[],{"id":383,"name":384,"techniques":385},"CAPEC-297","TCP ACK Ping",[],{"id":387,"name":388,"techniques":389},"CAPEC-298","UDP Ping",[],{"id":391,"name":392,"techniques":393},"CAPEC-299","TCP SYN Ping",[],{"id":395,"name":396,"techniques":397},"CAPEC-300","Port Scanning",[398],{"id":399,"name":400,"tactics":401,"countermeasures":403},"T1046","Network Service Discovery",[402],{"id":217,"name":218},[],{"id":405,"name":406,"techniques":407},"CAPEC-301","TCP Connect Scan",[],{"id":409,"name":410,"techniques":411},"CAPEC-302","TCP FIN Scan",[],{"id":413,"name":414,"techniques":415},"CAPEC-303","TCP Xmas Scan",[],{"id":417,"name":418,"techniques":419},"CAPEC-304","TCP Null Scan",[],{"id":421,"name":422,"techniques":423},"CAPEC-305","TCP ACK Scan",[],{"id":425,"name":426,"techniques":427},"CAPEC-306","TCP Window Scan",[],{"id":429,"name":430,"techniques":431},"CAPEC-307","TCP RPC Scan",[],{"id":433,"name":434,"techniques":435},"CAPEC-308","UDP Scan",[],{"id":437,"name":438,"techniques":439},"CAPEC-309","Network Topology Mapping",[440,484,494],{"id":441,"name":442,"tactics":443,"countermeasures":445},"T1016","System Network Configuration Discovery",[444],{"id":217,"name":218},[446,448,450,452,454,456,458,460,462,464,466,468,470,472,474,476,478,480,482],{"id":55,"name":56,"tactic":447},{"name":58},{"id":60,"name":61,"tactic":449},{"name":63},{"id":119,"name":120,"tactic":451},{"name":48},{"id":107,"name":108,"tactic":453},{"name":63},{"id":91,"name":92,"tactic":455},{"name":63},{"id":103,"name":104,"tactic":457},{"name":89},{"id":283,"name":284,"tactic":459},{"name":63},{"id":123,"name":124,"tactic":461},{"name":48},{"id":40,"name":41,"tactic":463},{"name":43},{"id":111,"name":112,"tactic":465},{"name":48},{"id":78,"name":79,"tactic":467},{"name":68},{"id":343,"name":344,"tactic":469},{"name":63},{"id":115,"name":116,"tactic":471},{"name":48},{"id":82,"name":83,"tactic":473},{"name":63},{"id":275,"name":276,"tactic":475},{"name":48},{"id":99,"name":100,"tactic":477},{"name":48},{"id":45,"name":46,"tactic":479},{"name":48},{"id":329,"name":330,"tactic":481},{"name":48},{"id":95,"name":96,"tactic":483},{"name":48},{"id":485,"name":486,"tactics":487,"countermeasures":489},"T1049","System Network Connections Discovery",[488],{"id":217,"name":218},[490,492],{"id":283,"name":284,"tactic":491},{"name":63},{"id":275,"name":276,"tactic":493},{"name":48},{"id":495,"name":496,"tactics":497,"countermeasures":499},"T1590","Gather Victim Network Information",[498],{"id":225,"name":226},[],{"id":501,"name":502,"techniques":503},"CAPEC-310","Scanning for Vulnerable Software",[],{"id":505,"name":506,"techniques":507},"CAPEC-312","Active OS Fingerprinting",[508],{"id":509,"name":510,"tactics":511,"countermeasures":513},"T1082","System Information Discovery",[512],{"id":217,"name":218},[514,518,520,522,524,526,528],{"id":515,"name":516,"tactic":517},"D3-DE","Decoy Environment",{"name":58},{"id":119,"name":120,"tactic":519},{"name":48},{"id":329,"name":330,"tactic":521},{"name":48},{"id":343,"name":344,"tactic":523},{"name":63},{"id":275,"name":276,"tactic":525},{"name":48},{"id":123,"name":124,"tactic":527},{"name":48},{"id":283,"name":284,"tactic":529},{"name":63},{"id":531,"name":532,"techniques":533},"CAPEC-313","Passive OS Fingerprinting",[534],{"id":509,"name":510,"tactics":535,"countermeasures":537},[536],{"id":217,"name":218},[538,540,542,544,546,548,550],{"id":515,"name":516,"tactic":539},{"name":58},{"id":119,"name":120,"tactic":541},{"name":48},{"id":329,"name":330,"tactic":543},{"name":48},{"id":343,"name":344,"tactic":545},{"name":63},{"id":275,"name":276,"tactic":547},{"name":48},{"id":123,"name":124,"tactic":549},{"name":48},{"id":283,"name":284,"tactic":551},{"name":63},{"id":553,"name":554,"techniques":555},"CAPEC-317","IP ID Sequencing Probe",[],{"id":557,"name":558,"techniques":559},"CAPEC-318","IP 'ID' Echoed Byte-Order Probe",[],{"id":561,"name":562,"techniques":563},"CAPEC-319","IP (DF) 'Don't Fragment Bit' Echoing Probe",[],{"id":565,"name":566,"techniques":567},"CAPEC-320","TCP Timestamp Probe",[],{"id":569,"name":570,"techniques":571},"CAPEC-321","TCP Sequence Number Probe",[],{"id":573,"name":574,"techniques":575},"CAPEC-322","TCP (ISN) Greatest Common Divisor Probe",[],{"id":577,"name":578,"techniques":579},"CAPEC-323","TCP (ISN) Counter Rate Probe",[],{"id":581,"name":582,"techniques":583},"CAPEC-324","TCP (ISN) Sequence Predictability Probe",[],{"id":585,"name":586,"techniques":587},"CAPEC-325","TCP Congestion Control Flag (ECN) Probe",[],{"id":589,"name":590,"techniques":591},"CAPEC-326","TCP Initial Window Size Probe",[],{"id":593,"name":594,"techniques":595},"CAPEC-327","TCP Options Probe",[],{"id":597,"name":598,"techniques":599},"CAPEC-328","TCP 'RST' Flag Checksum Probe",[],{"id":601,"name":602,"techniques":603},"CAPEC-329","ICMP Error Message Quoting Probe",[],{"id":605,"name":606,"techniques":607},"CAPEC-330","ICMP Error Message Echoing Integrity Probe",[],{"id":609,"name":610,"techniques":611},"CAPEC-472","Browser Fingerprinting",[],{"id":613,"name":614,"techniques":615},"CAPEC-497","File Discovery",[616],{"id":617,"name":618,"tactics":619,"countermeasures":621},"T1083","File and Directory Discovery",[620],{"id":217,"name":218},[622,624,626,628,630,632,634,636,638,640,642],{"id":45,"name":46,"tactic":623},{"name":48},{"id":78,"name":79,"tactic":625},{"name":68},{"id":55,"name":56,"tactic":627},{"name":58},{"id":60,"name":61,"tactic":629},{"name":63},{"id":82,"name":83,"tactic":631},{"name":63},{"id":99,"name":100,"tactic":633},{"name":48},{"id":95,"name":96,"tactic":635},{"name":48},{"id":111,"name":112,"tactic":637},{"name":48},{"id":40,"name":41,"tactic":639},{"name":43},{"id":115,"name":116,"tactic":641},{"name":48},{"id":103,"name":104,"tactic":643},{"name":89},{"id":645,"name":646,"techniques":647},"CAPEC-508","Shoulder Surfing",[],{"id":649,"name":650,"techniques":651},"CAPEC-573","Process Footprinting",[652],{"id":653,"name":654,"tactics":655,"countermeasures":657},"T1057","Process Discovery",[656],{"id":217,"name":218},[658,660,662,664,666,668],{"id":283,"name":284,"tactic":659},{"name":63},{"id":123,"name":124,"tactic":661},{"name":48},{"id":343,"name":344,"tactic":663},{"name":63},{"id":275,"name":276,"tactic":665},{"name":48},{"id":119,"name":120,"tactic":667},{"name":48},{"id":329,"name":330,"tactic":669},{"name":48},{"id":671,"name":672,"techniques":673},"CAPEC-574","Services Footprinting",[674],{"id":675,"name":676,"tactics":677,"countermeasures":679},"T1007","System Service Discovery",[678],{"id":217,"name":218},[680,682,684,686,688,690],{"id":119,"name":120,"tactic":681},{"name":48},{"id":283,"name":284,"tactic":683},{"name":63},{"id":275,"name":276,"tactic":685},{"name":48},{"id":123,"name":124,"tactic":687},{"name":48},{"id":329,"name":330,"tactic":689},{"name":48},{"id":343,"name":344,"tactic":691},{"name":63},{"id":693,"name":694,"techniques":695},"CAPEC-575","Account Footprinting",[696],{"id":697,"name":698,"tactics":699,"countermeasures":701},"T1087","Account Discovery",[700],{"id":217,"name":218},[702,706,710,714,718,722,726,730,734],{"id":703,"name":704,"tactic":705},"D3-RUAA","Restore User Account Access",{"name":43},{"id":707,"name":708,"tactic":709},"D3-AL","Account Locking",{"name":89},{"id":711,"name":712,"tactic":713},"D3-LAM","Local Account Monitoring",{"name":63},{"id":715,"name":716,"tactic":717},"D3-ULA","Unlock Account",{"name":43},{"id":719,"name":720,"tactic":721},"D3-AM","Access Modeling",{"name":53},{"id":723,"name":724,"tactic":725},"D3-DAM","Domain Account Monitoring",{"name":63},{"id":727,"name":728,"tactic":729},"D3-AA","Agent Authentication",{"name":68},{"id":731,"name":732,"tactic":733},"D3-CDP","Change Default Password",{"name":68},{"id":735,"name":736,"tactic":737},"D3-UAP","User Account Permissions",{"name":48},{"id":739,"name":740,"techniques":741},"CAPEC-576","Group Permission Footprinting",[742,748],{"id":743,"name":744,"tactics":745,"countermeasures":747},"T1069","Permission Groups Discovery",[746],{"id":217,"name":218},[],{"id":749,"name":750,"tactics":751,"countermeasures":753},"T1615","Group Policy Discovery",[752],{"id":217,"name":218},[754,756,760,762],{"id":50,"name":51,"tactic":755},{"name":53},{"id":757,"name":758,"tactic":759},"D3-NTPM","Network Traffic Policy Mapping",{"name":53},{"id":74,"name":75,"tactic":761},{"name":43},{"id":719,"name":720,"tactic":763},{"name":53},{"id":765,"name":766,"techniques":767},"CAPEC-577","Owner Footprinting",[768],{"id":769,"name":770,"tactics":771,"countermeasures":773},"T1033","System Owner/User Discovery",[772],{"id":217,"name":218},[774,776,780,784,786,790,792,796,798,802,804,806,810,814,816,820,822,826,828,830,834,838,840,842,844,846,850,854,856,860,862],{"id":119,"name":120,"tactic":775},{"name":48},{"id":777,"name":778,"tactic":779},"D3-PS","Process Suspension",{"name":89},{"id":781,"name":782,"tactic":783},"D3-PT","Process Termination",{"name":89},{"id":60,"name":61,"tactic":785},{"name":63},{"id":787,"name":788,"tactic":789},"D3-PSEP","Process Segment Execution Prevention",{"name":68},{"id":82,"name":83,"tactic":791},{"name":63},{"id":793,"name":794,"tactic":795},"D3-SAOR","Segment Address Offset Randomization",{"name":68},{"id":78,"name":79,"tactic":797},{"name":68},{"id":799,"name":800,"tactic":801},"D3-KBPI","Kernel-based Process Isolation",{"name":48},{"id":275,"name":276,"tactic":803},{"name":48},{"id":329,"name":330,"tactic":805},{"name":48},{"id":807,"name":808,"tactic":809},"D3-ABPI","Application-based Process Isolation",{"name":48},{"id":811,"name":812,"tactic":813},"D3-WSAM","Web Session Access Mediation",{"name":48},{"id":283,"name":284,"tactic":815},{"name":63},{"id":817,"name":818,"tactic":819},"D3-HR","Host Reboot",{"name":89},{"id":95,"name":96,"tactic":821},{"name":48},{"id":823,"name":824,"tactic":825},"D3-HS","Host Shutdown",{"name":89},{"id":99,"name":100,"tactic":827},{"name":48},{"id":45,"name":46,"tactic":829},{"name":48},{"id":831,"name":832,"tactic":833},"D3-DTP","Domain Trust Policy",{"name":48},{"id":835,"name":836,"tactic":837},"D3-PSMD","Process Self-Modification Detection",{"name":63},{"id":115,"name":116,"tactic":839},{"name":48},{"id":40,"name":41,"tactic":841},{"name":43},{"id":103,"name":104,"tactic":843},{"name":89},{"id":343,"name":344,"tactic":845},{"name":63},{"id":847,"name":848,"tactic":849},"D3-RD","Restore Database",{"name":43},{"id":851,"name":852,"tactic":853},"D3-DI","Data Inventory",{"name":53},{"id":55,"name":56,"tactic":855},{"name":58},{"id":857,"name":858,"tactic":859},"D3-PLA","Process Lineage Analysis",{"name":63},{"id":123,"name":124,"tactic":861},{"name":48},{"id":111,"name":112,"tactic":863},{"name":48},{"id":865,"name":866,"techniques":867},"CAPEC-59","Session Credential Falsification through Prediction",[],{"id":869,"name":870,"techniques":871},"CAPEC-60","Reusing Session IDs (aka Session Replay)",[872,924],{"id":873,"name":874,"tactics":875,"countermeasures":879},"T1134.001","Token Impersonation/Theft",[876,877,878],{"id":33,"name":34},{"id":36,"name":37},{"id":134,"name":135},[880,884,888,892,896,900,904,908,912,916,920],{"id":881,"name":882,"tactic":883},"D3-CR","Credential Revocation",{"name":89},{"id":885,"name":886,"tactic":887},"D3-CCSA","Credential Compromise Scope Analysis",{"name":63},{"id":889,"name":890,"tactic":891},"D3-CTS","Credential Transmission Scoping",{"name":48},{"id":893,"name":894,"tactic":895},"D3-ANCI","Authentication Cache Invalidation",{"name":89},{"id":897,"name":898,"tactic":899},"D3-TB","Token Binding",{"name":68},{"id":901,"name":902,"tactic":903},"D3-TBA","Token-based Authentication",{"name":68},{"id":905,"name":906,"tactic":907},"D3-DUC","Decoy User Credential",{"name":58},{"id":909,"name":910,"tactic":911},"D3-CH","Credential Hardening",{"name":68},{"id":913,"name":914,"tactic":915},"D3-CRO","Credential Rotation",{"name":68},{"id":917,"name":918,"tactic":919},"D3-MFA","Multi-factor Authentication",{"name":68},{"id":921,"name":922,"tactic":923},"D3-RIC","Reissue Credential",{"name":43},{"id":925,"name":926,"tactics":927,"countermeasures":932},"T1550.004","Web Session Cookie",[928,929],{"id":33,"name":34},{"id":930,"name":931},"TA0109","Lateral Movement",[933,935,937,939,941,943,945,947,949,951,953,955,957,959,961,963,965,967,969,971,973,975,977,979,981,983,985,987,989,991],{"id":913,"name":914,"tactic":934},{"name":68},{"id":275,"name":276,"tactic":936},{"name":48},{"id":921,"name":922,"tactic":938},{"name":43},{"id":889,"name":890,"tactic":940},{"name":48},{"id":279,"name":280,"tactic":942},{"name":63},{"id":317,"name":318,"tactic":944},{"name":63},{"id":835,"name":836,"tactic":946},{"name":63},{"id":325,"name":326,"tactic":948},{"name":63},{"id":343,"name":344,"tactic":950},{"name":63},{"id":329,"name":330,"tactic":952},{"name":48},{"id":799,"name":800,"tactic":954},{"name":48},{"id":807,"name":808,"tactic":956},{"name":48},{"id":823,"name":824,"tactic":958},{"name":89},{"id":321,"name":322,"tactic":960},{"name":63},{"id":881,"name":882,"tactic":962},{"name":89},{"id":817,"name":818,"tactic":964},{"name":89},{"id":885,"name":886,"tactic":966},{"name":63},{"id":287,"name":288,"tactic":968},{"name":48},{"id":905,"name":906,"tactic":970},{"name":58},{"id":309,"name":310,"tactic":972},{"name":63},{"id":781,"name":782,"tactic":974},{"name":89},{"id":909,"name":910,"tactic":976},{"name":68},{"id":917,"name":918,"tactic":978},{"name":68},{"id":857,"name":858,"tactic":980},{"name":63},{"id":333,"name":334,"tactic":982},{"name":63},{"id":777,"name":778,"tactic":984},{"name":89},{"id":893,"name":894,"tactic":986},{"name":89},{"id":339,"name":340,"tactic":988},{"name":63},{"id":811,"name":812,"tactic":990},{"name":48},{"id":271,"name":272,"tactic":992},{"name":63},{"id":994,"name":995,"techniques":996},"CAPEC-616","Establish Rogue Location",[997],{"id":998,"name":999,"tactics":1000,"countermeasures":1003},"T1036.005","Match Legitimate Resource Name or Location",[1001,1002],{"id":33,"name":34},{"id":36,"name":37},[1004,1006,1008,1010,1012,1014,1016,1018,1020,1022,1024,1026,1028],{"id":78,"name":79,"tactic":1005},{"name":68},{"id":40,"name":41,"tactic":1007},{"name":43},{"id":95,"name":96,"tactic":1009},{"name":48},{"id":99,"name":100,"tactic":1011},{"name":48},{"id":111,"name":112,"tactic":1013},{"name":48},{"id":45,"name":46,"tactic":1015},{"name":48},{"id":283,"name":284,"tactic":1017},{"name":63},{"id":115,"name":116,"tactic":1019},{"name":48},{"id":275,"name":276,"tactic":1021},{"name":48},{"id":55,"name":56,"tactic":1023},{"name":58},{"id":82,"name":83,"tactic":1025},{"name":63},{"id":60,"name":61,"tactic":1027},{"name":63},{"id":103,"name":104,"tactic":1029},{"name":89},{"id":1031,"name":1032,"techniques":1033},"CAPEC-643","Identify Shared Files/Directories on System",[1034],{"id":1035,"name":1036,"tactics":1037,"countermeasures":1039},"T1135","Network Share Discovery",[1038],{"id":217,"name":218},[],{"id":1041,"name":1042,"techniques":1043},"CAPEC-646","Peripheral Footprinting",[1044],{"id":1045,"name":1046,"tactics":1047,"countermeasures":1049},"T1120","Peripheral Device Discovery",[1048],{"id":217,"name":218},[],{"id":1051,"name":1052,"techniques":1053},"CAPEC-651","Eavesdropping",[1054],{"id":1055,"name":1056,"tactics":1057,"countermeasures":1061},"T1111","Multi-Factor Authentication Interception",[1058],{"id":1059,"name":1060},"TA0031","Credential Access",[1062,1066],{"id":1063,"name":1064,"tactic":1065},"D3-RH","Radiation Hardening",{"name":68},{"id":1067,"name":1068,"tactic":1069},"D3-HCI","Hardware Component Inventory",{"name":53},{"id":1071,"name":1072,"techniques":1073},"CAPEC-79","Using Slashes in Alternate Encoding",[],[1075],{"_key":1076,"name":1077,"source":1078,"url":1079,"maturity":1080,"reliability_score":1081,"verified":1082,"type":9,"platforms":1083,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_FOLLOW-REDIRECTS_FOLLOW-REDIRECTS","Follow Redirects","github","https://github.com/follow-redirects/follow-redirects/issues/235","poc",0.3,false,[],[1085,1086],"GHSA-cxjh-pqwp-8mfp","DEBIAN-CVE-2024-28849",[],[1089,1091,1093,1095,1096,1098],{"_key":1090},"OPENSUSE-SU-2024:13830-1",{"_key":1092},"UBUNTU-CVE-2024-28849",{"_key":1094},"USN-8217-1",{"_key":1086},{"_key":1097},"MGASA-2026-0327",{"_key":1099},"RHSA-2024:3781",[],[1102,1103,1105,1107,1109,1111,1113,1115,1117,1119],{"_key":1090},{"_key":1104},"CGA-3QPX-2JP6-8W3M",{"_key":1106},"CGA-7G4Q-75VQ-228C",{"_key":1108},"CGA-896M-V6FF-2Q96",{"_key":1110},"CGA-8M86-GWW5-8PM9",{"_key":1112},"CGA-FP6H-638C-5C69",{"_key":1114},"CGA-R834-RJ47-CFJ9",{"_key":1116},"CGA-VWR7-QWFJ-QHHF",{"_key":1118},"CGA-W43G-68F9-2MQP",{"_key":1120},"CGA-4VMV-7RFH-8Q9H","2024-03-14T17:07:27.338Z","2025-02-13T17:47:32.862Z","Analyzed",{"cisa_kev":1082,"cisa_ransomware":1082,"cisa_vendor":9,"epss_severity":1125,"epss_score":1126,"severity":1127,"severity_score":1128,"severity_version":1129,"severity_source":1130,"severity_vector":1131,"severity_status":1123},"low",0.01044,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",[1133,1143,1149,1154,1159,1164,1169,1174,1179,1183],{"url":1134,"sources":1135,"tags":1138},"https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-cxjh-pqwp-8mfp",[1130,1136,1137],"nvd","osv_npm",[1139,1140,1141,1142],"X Refsource CONFIRM","Exploit","Vendor Advisory","WEB",{"url":1144,"sources":1145,"tags":1146},"https://github.com/psf/requests/issues/1885",[1130,1136,1137],[1147,1148,1142],"X Refsource MISC","Issue Tracking",{"url":1150,"sources":1151,"tags":1152},"https://github.com/follow-redirects/follow-redirects/commit/c4f847f85176991f95ab9c88af63b1294de8649b",[1130,1136,1137],[1147,1153,1142],"Patch",{"url":1155,"sources":1156,"tags":1157},"https://hackerone.com/reports/2390009",[1130,1136,1137],[1147,1148,1158,1142],"Third Party Advisory",{"url":1160,"sources":1161,"tags":1162},"https://fetch.spec.whatwg.org/#authentication-entries",[1130,1136,1137],[1147,1163,1142],"Technical Description",{"url":1165,"sources":1166,"tags":1167},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z/",[1130,1136],[1168,1158],"Mailing List",{"url":1170,"sources":1171,"tags":1172},"https://nvd.nist.gov/vuln/detail/CVE-2024-28849",[1137],[1173],"Advisory",{"url":1175,"sources":1176,"tags":1177},"https://github.com/follow-redirects/follow-redirects",[1137],[1178],"PACKAGE",{"url":1180,"sources":1181,"tags":1182},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VOIF4EPQUCKDBEVTGRQDZ3CGTYQHPO7Z",[1137],[1142],{"url":1184,"sources":1185,"tags":1187},"https://security-tracker.debian.org/tracker/CVE-2024-28849",[1186],"osv_debian",[1173],[],{"date":1190,"score":1126,"percentile":1191},"2026-09-03",0.61821,[1193,1197,1200,1203,1206,1209,1212,1215,1218,1221,1224,1227,1230,1233,1235,1239,1242,1245,1247,1250,1252,1255,1258,1261,1264,1267,1270,1273,1276,1279,1282,1285,1288,1292,1295,1298,1301,1304,1307,1310,1313,1316,1318,1321,1324,1327,1330,1333,1336,1338,1340,1343,1346,1348,1351,1354,1356,1359,1362,1365,1368,1371,1374,1377,1379,1382,1385,1388,1391,1393,1396,1399,1402,1405,1408,1411,1414,1416,1419,1422,1424,1427,1430,1433,1436,1438,1441,1444,1447,1450],{"date":1194,"score":1195,"percentile":1196},"2025-11-04",0.00216,0.44184,{"date":1198,"score":1195,"percentile":1199},"2025-11-05",0.44181,{"date":1201,"score":1195,"percentile":1202},"2025-11-06",0.44192,{"date":1204,"score":1195,"percentile":1205},"2025-11-07",0.44218,{"date":1207,"score":1195,"percentile":1208},"2025-11-08",0.44215,{"date":1210,"score":1195,"percentile":1211},"2025-11-09",0.44198,{"date":1213,"score":1195,"percentile":1214},"2025-11-10",0.44156,{"date":1216,"score":1195,"percentile":1217},"2025-11-11",0.44173,{"date":1219,"score":1195,"percentile":1220},"2025-11-12",0.44207,{"date":1222,"score":1195,"percentile":1223},"2025-11-13",0.44221,{"date":1225,"score":1195,"percentile":1226},"2025-11-14",0.44234,{"date":1228,"score":1195,"percentile":1229},"2025-11-15",0.44228,{"date":1231,"score":1195,"percentile":1232},"2025-11-16",0.44212,{"date":1234,"score":1195,"percentile":1196},"2025-11-17",{"date":1236,"score":1237,"percentile":1238},"2025-11-18",0.00456,0.61245,{"date":1240,"score":1237,"percentile":1241},"2025-11-19",0.61258,{"date":1243,"score":1237,"percentile":1244},"2025-11-20",0.61247,{"date":1246,"score":1195,"percentile":1199},"2025-11-21",{"date":1248,"score":1195,"percentile":1249},"2025-11-22",0.44176,{"date":1251,"score":1195,"percentile":1214},"2025-11-23",{"date":1253,"score":1195,"percentile":1254},"2025-11-24",0.4415,{"date":1256,"score":1195,"percentile":1257},"2025-11-25",0.44159,{"date":1259,"score":1195,"percentile":1260},"2025-11-26",0.4416,{"date":1262,"score":1195,"percentile":1263},"2025-11-27",0.44167,{"date":1265,"score":1195,"percentile":1266},"2025-11-28",0.44134,{"date":1268,"score":1195,"percentile":1269},"2025-11-29",0.44111,{"date":1271,"score":1195,"percentile":1272},"2025-11-30",0.4409,{"date":1274,"score":1195,"percentile":1275},"2025-12-01",0.44227,{"date":1277,"score":1195,"percentile":1278},"2025-12-02",0.44241,{"date":1280,"score":1195,"percentile":1281},"2025-12-03",0.44238,{"date":1283,"score":1195,"percentile":1284},"2025-12-04",0.44095,{"date":1286,"score":1195,"percentile":1287},"2025-12-05",0.4412,{"date":1289,"score":1290,"percentile":1291},"2025-12-06",0.00677,0.70714,{"date":1293,"score":1290,"percentile":1294},"2025-12-07",0.70712,{"date":1296,"score":1290,"percentile":1297},"2025-12-08",0.70717,{"date":1299,"score":1290,"percentile":1300},"2025-12-09",0.70748,{"date":1302,"score":1290,"percentile":1303},"2025-12-10",0.70783,{"date":1305,"score":1290,"percentile":1306},"2025-12-11",0.70805,{"date":1308,"score":1290,"percentile":1309},"2025-12-12",0.70829,{"date":1311,"score":1290,"percentile":1312},"2025-12-13",0.70832,{"date":1314,"score":1290,"percentile":1315},"2025-12-14",0.70833,{"date":1317,"score":1290,"percentile":1309},"2025-12-15",{"date":1319,"score":1290,"percentile":1320},"2025-12-16",0.70838,{"date":1322,"score":1290,"percentile":1323},"2025-12-17",0.70854,{"date":1325,"score":1290,"percentile":1326},"2025-12-18",0.70878,{"date":1328,"score":1290,"percentile":1329},"2025-12-19",0.70894,{"date":1331,"score":1290,"percentile":1332},"2025-12-20",0.70891,{"date":1334,"score":1290,"percentile":1335},"2025-12-21",0.70885,{"date":1337,"score":1290,"percentile":1335},"2025-12-22",{"date":1339,"score":1290,"percentile":1335},"2025-12-23",{"date":1341,"score":1290,"percentile":1342},"2025-12-24",0.70896,{"date":1344,"score":1290,"percentile":1345},"2025-12-25",0.70924,{"date":1347,"score":1290,"percentile":1345},"2025-12-26",{"date":1349,"score":1290,"percentile":1350},"2025-12-27",0.70962,{"date":1352,"score":1290,"percentile":1353},"2025-12-28",0.70895,{"date":1355,"score":1290,"percentile":1332},"2025-12-29",{"date":1357,"score":1290,"percentile":1358},"2025-12-30",0.70907,{"date":1360,"score":1290,"percentile":1361},"2025-12-31",0.7093,{"date":1363,"score":1290,"percentile":1364},"2026-01-01",0.71085,{"date":1366,"score":1290,"percentile":1367},"2026-01-02",0.71081,{"date":1369,"score":1290,"percentile":1370},"2026-01-03",0.7108,{"date":1372,"score":1290,"percentile":1373},"2026-01-04",0.70932,{"date":1375,"score":1290,"percentile":1376},"2026-01-05",0.70925,{"date":1378,"score":1290,"percentile":1361},"2026-01-06",{"date":1380,"score":1290,"percentile":1381},"2026-01-07",0.70946,{"date":1383,"score":1290,"percentile":1384},"2026-01-08",0.70964,{"date":1386,"score":1290,"percentile":1387},"2026-01-09",0.70972,{"date":1389,"score":1290,"percentile":1390},"2026-01-10",0.7097,{"date":1392,"score":1290,"percentile":1384},"2026-01-11",{"date":1394,"score":1290,"percentile":1395},"2026-01-12",0.70953,{"date":1397,"score":1290,"percentile":1398},"2026-01-13",0.7095,{"date":1400,"score":1290,"percentile":1401},"2026-01-14",0.70973,{"date":1403,"score":1290,"percentile":1404},"2026-01-15",0.70978,{"date":1406,"score":1290,"percentile":1407},"2026-01-16",0.70995,{"date":1409,"score":1290,"percentile":1410},"2026-01-17",0.70988,{"date":1412,"score":1290,"percentile":1413},"2026-01-18",0.70968,{"date":1415,"score":1290,"percentile":1350},"2026-01-19",{"date":1417,"score":1290,"percentile":1418},"2026-01-20",0.70971,{"date":1420,"score":1290,"percentile":1421},"2026-01-21",0.70975,{"date":1423,"score":1290,"percentile":1410},"2026-01-22",{"date":1425,"score":1290,"percentile":1426},"2026-01-23",0.71017,{"date":1428,"score":1290,"percentile":1429},"2026-01-24",0.71022,{"date":1431,"score":1290,"percentile":1432},"2026-01-25",0.70996,{"date":1434,"score":1290,"percentile":1435},"2026-01-26",0.70991,{"date":1437,"score":1290,"percentile":1407},"2026-01-27",{"date":1439,"score":1290,"percentile":1440},"2026-01-28",0.71013,{"date":1442,"score":1290,"percentile":1443},"2026-01-29",0.71011,{"date":1445,"score":1290,"percentile":1446},"2026-01-30",0.71019,{"date":1448,"score":1290,"percentile":1449},"2026-01-31",0.71023,{"date":1451,"score":1290,"percentile":1452},"2026-02-01",0.71155,[1454,1459,1461,1463],{"source":1130,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1455,"cvss_v4_0":9},{"baseScore":1128,"baseSeverity":1456,"vectorString":1131,"impactScore":1457,"exploitabilityScore":1458},"MEDIUM",6,7.2,{"source":1136,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1460,"cvss_v4_0":9},{"baseScore":1128,"baseSeverity":1456,"vectorString":1131,"impactScore":1457,"exploitabilityScore":1458},{"source":1137,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1462,"cvss_v4_0":9},{"baseScore":1128,"baseSeverity":9,"vectorString":1131,"impactScore":1457,"exploitabilityScore":1458},{"source":1186,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1464,"cvss_v4_0":9},{"baseScore":1128,"baseSeverity":9,"vectorString":1131,"impactScore":1457,"exploitabilityScore":1458},[1466,1482,1491,1495],{"ecosystem":1467,"name":1468,"vendor":1469,"product":1468,"cpe_part":9,"purl_type":1470,"purl_namespace":1469,"purl_name":1468,"source":9,"versions":1471},"Debian","node-follow-redirects","debian","deb",[1472,1476,1477,1481],{"version":1473,"is_range":1474,"range_type":1475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":1473,"is_range":1474,"range_type":1475,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1478,"is_range":1474,"range_type":1475,"version_start":9,"version_start_type":9,"version_end":1479,"version_end_type":1480,"fixed_in":9},"lt1_15_6+~1_14_4_1","1.15.6+~1.14.4-1","excluding",{"version":1478,"is_range":1474,"range_type":1475,"version_start":9,"version_start_type":9,"version_end":1479,"version_end_type":1480,"fixed_in":9},{"ecosystem":9,"name":1483,"vendor":1484,"product":1483,"cpe_part":1485,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1486},"follow-redirects","follow-redirects_project","a",[1487],{"version":1488,"is_range":1474,"range_type":1489,"version_start":9,"version_start_type":9,"version_end":1490,"version_end_type":1480,"fixed_in":9},"lt1.15.6","cpe","1.15.6",{"ecosystem":9,"name":1483,"vendor":1483,"product":1483,"cpe_part":1485,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1492},[1493],{"version":1494,"is_range":1474,"range_type":1130,"version_start":9,"version_start_type":9,"version_end":1490,"version_end_type":1480,"fixed_in":9},"\u003C 1.15.6",{"ecosystem":1496,"name":1483,"vendor":1496,"product":1483,"cpe_part":9,"purl_type":1497,"purl_namespace":9,"purl_name":1483,"source":9,"versions":1498},"Npm","npm",[1499],{"version":1500,"is_range":1474,"range_type":1501,"version_start":9,"version_start_type":9,"version_end":1490,"version_end_type":1480,"fixed_in":9},"lt1_15_6","semver"]