CVE-2022-24719

CVE-2022-24719 is a medium-severity vulnerability affecting Fluture-Node versions 4.0.0 and 4.0.1, a Node.js library for FP-style HTTP and streaming. It allows for the leakage of confidential headers (e.g., Authorization, Cookie) when the followRedirects or followRedirectsWith functions are used and a redirect occurs to a third-party domain or an unencrypted HTTP connection. The attack vector is network-based with low attack complexity, requiring user interaction, and could lead to partial confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.