PT-2022-13247 · Npm+2 · Follow-Redirects+2

Published 2022-02-09 · Updated 2026-04-28 · CVE-2022-0536

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NPM follow-redirects versions prior to 1.14.8

Description The issue is related to the improper removal of sensitive information before storage or transfer, which can lead to exposure of sensitive information to unauthorized actors.

Recommendations For versions prior to 1.14.8, update to version 1.14.8 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-212

CWE-200

Related Identifiers

AZL-45156

CVE-2022-0536

GHSA-PW2R-VQ6V-HR8C

USN-8217-1

Affected Products

Linuxmint

Ubuntu

Follow-Redirects

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0536.json · Exploit
• https://github.com/follow-redirects/follow-redirects/commit/62e546a99c07c3ee5e4e0718c84a6ca127c5c445 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-0536 · Security Note
• https://osv.dev/vulnerability/CVE-2022-0536 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pw2r-vq6v-hr8c · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0536 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-26159 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-45156 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-0536 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-0536 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-0536 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0536 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8217-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-28849 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8217-1 · Vendor Advisory