Description
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host.
Remediation
References
Related Vulnerabilities
WordPress Plugin Frontend Uploader Cross-Site Scripting (1.3.2)
Apache Traffic Server Improper Input Validation Vulnerability (CVE-2010-2952)
WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.19)
Atlassian Confluence Incorrect Authorization Vulnerability (CVE-2023-22518)
WordPress Plugin WP Symposium Multiple SQL Injection Vulnerabilities (12.09)