CVE-2025-4673

CVE-2025-4673 describes a vulnerability where Proxy-Authorization and Proxy-Authenticate headers can be inadvertently persisted across cross-origin redirects, potentially leading to the leakage of sensitive authentication information. This medium-severity vulnerability (CVSS 6.8) has a network attack vector and high confidentiality impact, but requires high attack complexity. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low immediate threat level.