VULNERABILITY INTELLIGENCE
CVE-2025-22227
CVSS score6.1 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-07-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
In some specific scenarios with chained redirects, Reactor Netty HTTP client leaks credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200