CVE-2025-4673
Vulnerability Summary
Timeline
Description
Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.
CVSS Metrics
- v3.1•MEDIUM•Score: 6.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Trends
Current EPSS score: 0.67%• Percentile: 50%
Affected Systems
- chainguard•addon-resizer
< 1.8.23-r6
- chainguard•addon-resizer-compat
< 1.8.23-r6
- chainguard•addon-resizer-fips
< 1.8.23-r6
- chainguard•addon-resizer-fips-compat
< 1.8.23-r6
- chainguard•age
< 1.2.1-r5
- chainguard•age-fips
< 1.2.1-r5
- chainguard•agentbeat
< 9.0.2-r1
- chainguard•agentbeat-fips
< 9.0.2-r1
- chainguard•amass
< 4.2.0-r24
- chainguard•amazon-cloudwatch-agent
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-all
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard-fips
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-compat
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-config-downloader
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-config-downloader-fips
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-config-translator
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-config-translator-fips
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-fips
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-operator-fips
< 3.0.1-r1
- chainguard•amazon-cloudwatch-agent-operator-fips-compat
< 3.0.1-r1
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent
< 1.300056.1-r1
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent-fips
< 1.300056.1-r1
- chainguard•amazon-k8s-cni
< 1.19.5-r1
- chainguard•amazon-k8s-cni-compat
< 1.19.5-r1
- chainguard•amazon-k8s-cni-init
< 1.19.5-r1
- chainguard•amazon-k8s-cni-init-compat
< 1.19.5-r1
- chainguard•amazon-ssm-agent
< 3.3.2656.0-r1
- chainguard•amazon-ssm-agent-ecs-exec
< 3.3.2656.0-r1
- chainguard•amazon-ssm-agent-ecs-exec-fips
< 3.3.2656.0-r1
- chainguard•amazon-ssm-agent-fips
< 3.3.2656.0-r1
- chainguard•apache-beam-java-11-sdk
< 0
- chainguard•apache-beam-java-17-sdk
< 0
- chainguard•apache-beam-java-21-sdk
< 0
- chainguard•apache-beam-java-sdk
< 0
- chainguard•apko
< 0.27.9-r1
- chainguard•apko-fips
< 0.27.9-r1
- chainguard•auditbeat-7
< 7.17.28-r14
- chainguard•auditbeat-7-oci-entrypoint
< 7.17.28-r14
- chainguard•auditbeat-fips-7
< 7.17.28-r14
- chainguard•authservice
< 1.0.4-r8
- chainguard•authservice-compat
< 1.0.4-r8
- chainguard•authservice-fips
< 1.0.4-r8
- chainguard•authservice-fips-compat
< 1.0.4-r8
- chainguard•aws-application-networking-k8s
< 1.1.2-r0
- chainguard•aws-application-networking-k8s-compat
< 1.1.2-r0
- chainguard•aws-application-networking-k8s-fips
< 1.1.2-r15
- chainguard•aws-application-networking-k8s-fips-compat
< 1.1.2-r15
- chainguard•aws-ebs-csi-driver
< 1.44.0-r1
- chainguard•aws-efs-csi-driver
< 2.1.8-r3
Showing first 50 affected entries in server-rendered view.
References (18)
- https://go.dev/cl/679257
- https://go.dev/issue/73816
- https://groups.google.com/g/golang-announce/c/ufZ8WpEsA3A
- https://pkg.go.dev/vuln/GO-2025-3751
- https://access.redhat.com/errata/RHSA-2025:10672
- https://access.redhat.com/security/updates/classification/#moderate
- https://bugzilla.redhat.com/show_bug.cgi?id=2373305
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10672.json
- https://access.redhat.com/security/cve/CVE-2025-4673
- https://www.cve.org/CVERecord?id=CVE-2025-4673
- https://nvd.nist.gov/vuln/detail/CVE-2025-4673
- https://access.redhat.com/errata/RHSA-2025:15406
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15406.json
- https://access.redhat.com/errata/RHSA-2025:15887
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15887.json
- https://access.redhat.com/errata/RHSA-2025:16432
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16432.json
- https://security-tracker.debian.org/tracker/CVE-2025-4673