CVE-2023-30846

CVE-2023-30846 is a critical vulnerability affecting versions 1.7.3 and earlier of the Microsoft typed-rest-client library, which can lead to the unauthorized leakage of authentication data. Specifically, when using Basic, Bearer, or Personal Access Token credential handlers, a redirection to a third-party host will cause the client to inadvertently send authentication headers to the new, potentially malicious, destination. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity that can result in high confidentiality impact without requiring user interaction. There is currently no evidence of active exploitation, nor are there known public exploits or significant community discussion surrounding this CVE.