CVE-2024-28849

CVE-2024-28849 is a credential leakage vulnerability affecting the 'follow-redirects' Node.js module, specifically versions prior to 1.15.6. The flaw allows the 'proxy-authentication' header, containing credentials, to persist during cross-domain redirects, potentially exposing sensitive information. Rated as Medium severity (CVSS 6.5), it has a low attack complexity and high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.