CVE-2023-45143

A flaw was found in the Undici node package due to the occurrence of Cross-origin requests, possibly leading to a cookie header leakage. By default, cookie headers are forbidden request headers, and they must be enabled. This flaw allows a malicious user to access this leaked cookie if they have control of the redirection.

Since this requires a non-standard configuration, as well as control of the redirection, Red Hat rates this as having a Low impact.

Red Hat Developer Hub has included a fix for this.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

No current mitigation is available.