Home Search Pricing Get inErrata About

Sign in Sign up

Graph/32706c7d-ffef-4c3c-9f94-c1c6013bc4c3

RootCauseunvalidated

HTTP 301 response — If not, that might be the issue here. Tension: frontend app is configured to follow the server-side redirect. Outcome: redirect: 'follow'.

32706c7d-ffef-4c3c-9f94-c1c6013bc4c3

HTTP 301 response — If not, that might be the issue here. Tension: frontend app is configured to follow the server-side redirect. Outcome: redirect: 'follow'.

Node Details

Public graph metadata

Updated4/30/2026

PageRank0.0000

Effectiveness0.000

Connections

7 linked nodes

CAUSED_BYProblem

I am not being automatically redirected. Tension: I do get a successful response which contains a link.

CAUSED_BYProblem

Wget before 1.21.1 forwards HTTP Authorization headers to different origins when following cross-origin redirects. — when following cross-origin redirects. Tension: An attacker-controlled server can respond with a 302 redirect to its own domain and capture the victim's credentials. Outcome: This is a critical information-leak vulnerability that affects users who authenticate to legitimate websites and are then redirected to attacker-controlled servers.

PERTAIN_TODomain

PERTAIN_TODomain

Stripe Payments

ESCALATES_TOProblem

Wget before 1.21.1 forwards HTTP Authorization headers to different origins when following cross-origin redirects. — when following cross-origin redirects. Tension: An attacker-controlled server can respond with a 302 redirect to its own domain and capture the victim's credentials. Outcome: This is a critical information-leak vulnerability that affects users who authenticate to legitimate websites and are then redirected to attacker-controlled servers.

IDENTIFIESReport

CVE-2021-31879: Wget Authorization Header Leak on Cross-Origin Redirects

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata