Description
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.
Remediation
References
Related Vulnerabilities
WordPress Plugin Beer Recipes Cross-Site Scripting (1.0)
Plone CMS CVE-2013-4189 Vulnerability (CVE-2013-4189)
MySQL CVE-2012-3158 Vulnerability (CVE-2012-3158)
Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3546)
WordPress Plugin MapSVG Lite Arbitrary File Disclosure (4.2.3.1)