1. Home
  2. Security Advisories
  3. PHP (Composer)
  4. PHP:GUZZLEHTTP-GUZZLE-2022-31090

[PHP:GUZZLEHTTP-GUZZLE-2022-31090] CURLOPT_HTTPAUTH option not cleared on change of origin

Severity High
Affected Packages 2
CVEs 1
Info Packages References Vulnerabilities
CURLOPT_HTTPAUTH option not cleared on change of origin
Package Affected Version
pkg:composer/guzzlehttp/guzzle >= 7, < 7.4.5
pkg:composer/guzzlehttp/guzzle >= 4, < 6.5.8
ID
PHP:GUZZLEHTTP-GUZZLE-2022-31090
Severity
high
Severity from
CVE-2022-31090
URL
https://github.com/guzzle/guzzle/security/advisories/GHSA-25mq-v84q-4j7r
Published
2022-06-20T22:24:00
(2 years ago)
Modified
2022-06-21T17:36:48
(2 years ago)
Rights
PHP Security Advisories Database Team
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:composer/guzzlehttp/guzzle guzzlehttp guzzle >= 7 < 7.4.5
Affected pkg:composer/guzzlehttp/guzzle guzzlehttp guzzle >= 4 < 6.5.8
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date