CVE-2020-5404: Insufficiently Protected Credentials
(updated )
The HttpClient from Reactor Netty may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient
must have been explicitly configured to follow redirects.
References
Detect and mitigate CVE-2020-5404 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →