🎯 New Report #3642600: Authorization header leak in ssrf filter via cross-host redirect leads to credential theft and unauthorized access
🔺Severity: null
👽 Reporter: argareksapatii
⭐️ Reputation: 182
🛠 State: resolved
💼 Team: arkadiyt-projects
💵 Bounty: null
🕐 Submitted: 2026-04-01
⏰ Disclosed: 2026-04-15 20:43:58
📝 Summary: A vulnerability was discovered in the ssrf filter library. The vulnerability allowed an attacker-controlled redirect target to receive credentials that were intended only for the original request origin. This was possible because ssrf filter followed redirects by rebuilding each redirected request from the original request options, including the Authorization header. As a result, sensitive state such as bearer tokens was forwarded across cross-host redirects, leading to credential theft and unauthorized access.
📂 Report JSON File: 3642600
@hackeronereports