CVE-2024-6104

CVE-2024-6104 affects go-retryablehttp prior to version 0.7.7, where it failed to sanitize URLs before logging them, potentially exposing sensitive HTTP basic authentication credentials in log files. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring low privileges, and leading to high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low immediate threat.