Disclosed vulnerabilities
CVE-2022-31042 Published: Sep 12, 2022

Unvalidated Follow Redirects in guzzle/guzzle

7.5 High Severity Follow packagist php redirects Unvalidated
@amammad Reported by Checkmarx Zero

Summary

Unvalidated Follow Redirects in guzzle/guzzle.

Product

guzzle/guzzle prior to 6.5.7 and 7.x prior to 7.4.4.

Impact

The cookies and important HTTP headers can be leaked to another party or even attacker ( e.g. there is a open redirect in third party site)

Steps to reproduce

https://drive.google.com/file/d/1MtpKQKClRBo69dvuI-xJzzPuuolk2y5s/view?usp=sharing

Remediation

Update guzzle/guzzle to version 6.5.7 or 7.4.4.

Credit

This issue was reported by @amammad through huntr.dev.

Resources

  1. e3ff079
  2. Disclosure
  3. Advisory

Explore more findings

27 Nov 2025 CVE-2025-34281 Stored Cross-Site Scripting (XSS) in ThingsBoard 6.2 Visit the page 17 Jan 2025 CVE-2025-0825 HTTP Response Splitting in cpp-httplib 6.9 Visit the page 17 Jun 2025 CVE-2025-6050 Stored Cross-Site Scripting (XSS) in Mezzanine CMS Admin Interface 4.8 Visit the page 12 Dec 2024 CVE-2024-8374 Code Injection in UltiMaker Cura 7.8 Visit the page 14 Nov 2024 CVE-2024-52526 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Tab 7.5 Visit the page 14 Nov 2024 CVE-2024-51497 Stored Cross-site Scripting in @LibreNMS/LibreNMS Custom OID Tab 7.5 Visit the page 14 Nov 2024 CVE-2024-51496 Reflected Cross-site Scripting in @LibreNMS/LibreNMS /wireless and /health endpoints 7.5 Visit the page 14 Nov 2024 CVE-2024-51495 Stored Cross-site Scripting in @LibreNMS/LibreNMS Device Overview `overwrite_ip` Field 7.5 Visit the page 14 Nov 2024 CVE-2024-51494 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings 7.5 Visit the page 14 Nov 2024 CVE-2024-50352 Stored Cross-site Scripting in @LibreNMS/LibreNMS Services Section of Device Overview 7.5 Visit the page 14 Nov 2024 CVE-2024-50351 Reflected Cross-site Scripting in @LibreNMS/LibreNMS Logs Tab 7.5 Visit the page 14 Nov 2024 CVE-2024-50350 Stored Cross-site Scripting in @LibreNMS/LibreNMS Port Settings Port Group 7.5 Visit the page

Stay connected and never miss a research update!

Contact us