libsoup Proxy Authentication Credential Leakage Vulnerability

A vulnerability in the libsoup HTTP library can lead to unintended transmission of proxy authentication credentials to external servers. This issue arises during HTTP redirects, where libsoup correctly removes the Authorization header but fails to do the same for the Proxy-Authorization header when the request is redirected to a different host. Consequently, sensitive proxy credentials may be inadvertently exposed to third-party servers. Applications that utilize libsoup for HTTP communication could unintentionally leak proxy authentication data.

Impact

Exploitation of this vulnerability may result in the unauthorized disclosure of proxy authentication credentials to third parties, creating a significant confidentiality risk.