CVE-2019-11284

CVE-2019-11284 is a high-severity vulnerability affecting Pivotal Reactor Netty versions prior to 0.8.11, where the software inadvertently passes sensitive headers, including authorization credentials, through redirects. This flaw allows a remote, unauthenticated attacker to potentially gain unauthorized access to credentials intended for a different server. The CVSS score of 8.6 indicates a critical risk due to its network-based attack vector and high confidentiality impact, requiring no user interaction or privileges. While there is no evidence of active exploitation, public exploit code, or significant community discussion, organizations using affected versions should prioritize patching to mitigate this credential exposure risk.