Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

This release of the Red Hat build of OpenTelemetry provides a CVE fix.

Breaking changes:
* Nothing

Deprecations:
* Nothing

Technology Preview features:
* Nothing

Enhancements:
* Nothing

Bug fixes:
* Nothing

Known issues:
* Nothing

CVE-2025-4673 is a vulnerability in the net/http package of the Go programming language where sensitive headers (Proxy-Authorization and Proxy-Authenticate) are not cleared on cross-origin redirects. This flaw can cause these headers to be inadvertently forwarded to unauthorized parties if a network attacker manipulates redirect responses. Exploitation requires a proxy that uses these headers for authentication and user interaction with a malicious URL. The vulnerability impacts confidentiality but not integrity or availability. Red Hat's advisory for their OpenTelemetry build (version 3.6.1) includes this fix, but no official patch or mitigation is currently available that meets Red Hat's deployment and stability criteria.

Detailed information about Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.1 release affecting Red Hat Product Security Red Hat. Get real-time upd

Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.1 release - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:10735

https://access.redhat.com/security/cve/CVE-2025-4673

https://access.redhat.com/security/cve/CVE-2025-6020

https://access.redhat.com/security/updates/classification/

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/red_hat_build_of_opentelemetry

Canonical URL

https://access.redhat.com/errata/RHSA-2025:10676

https://access.redhat.com/security/updates/classification/#moderate

2373305

https://access.redhat.com/errata/RHSA-2025:10677

https://access.redhat.com/errata/RHSA-2025:10672

https://access.redhat.com/errata/RHSA-2025:15406

https://access.redhat.com/errata/RHSA-2025:15887

CVE-2025-4673 Sensitive headers not cleared on cross-origin redirect in net/http - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.1 release

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. 

Security Fix(es):

* net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The vulnerability CVE-2025-4673 affects the net/http package in the Go programming language, where sensitive headers are not properly cleared during cross-origin HTTP redirects. This could potentially lead to unintended information disclosure in certain cross-origin redirect scenarios. Red Hat has issued security advisories for their go-toolset packages on Red Hat Enterprise Linux 8 and 10, providing updated versions that fix this issue. The affected versions include go-toolset versions >=1.24.0 and <1.24.4 as distributed in Red Hat Enterprise Linux 8 and 10. The fix is included in go-toolset version 1.24.4.

Detailed information about Red Hat Security Advisory: Red Hat build of Tempo 3.6.1 release affecting Red Hat Product Security Red Hat. Get real-time updates, te

Red Hat Security Advisory: Red Hat build of Tempo 3.6.1 release - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2025:10823

https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/distributed_tracing/distributed-tracing-platform-tempo

https://access.redhat.com/errata/RHSA-2025:16432

Red Hat Security Advisory: go-toolset:rhel8 security update

Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

CVE-2025-4673 is a medium severity vulnerability identified in the Go standard library's net/http package, affecting versions up to 1.24.0-0. The issue involves the improper handling of Proxy-Authorization and Proxy-Authenticate HTTP headers during cross-origin redirects. Specifically, these headers, which can contain sensitive authentication credentials, are persisted and sent along with redirected requests to different origins. This behavior violates the principle of least privilege and can lead to unintended leakage of sensitive proxy authentication information to potentially untrusted external servers. The vulnerability is categorized under CWE-201, which concerns the insertion of sensitive information into sent data. The CVSS v3.1 base score is 6.8, reflecting a medium severity with a vector indicating network attack vector (AV:N), high attack complexity (AC:H), no privileges required (PR:N), no user interaction (UI:N), scope changed (S:C), high confidentiality impact (C:H), no integrity or availability impact (I:N/A:N). The scope change indicates that the vulnerability affects components beyond the initially vulnerable component, increasing the risk. Although no known exploits are reported in the wild, the vulnerability could be exploited remotely without authentication or user interaction, but requires high attack complexity, likely due to the need to induce cross-origin redirects and control proxy authentication headers. This vulnerability is significant because the Go net/http package is widely used in web servers, proxies, and client applications, meaning that many applications and services built on Go could inadvertently expose sensitive proxy credentials if they handle redirects improperly. The lack of available patches at the time of reporting suggests that users must apply mitigations or updates once released to prevent exploitation.

Detailed information about CVE-2025-4673: CWE-201: Insertion of Sensitive Information Into Sent Data in Go standard library net/http affecting Go standard libra

CVE-2025-4673: CWE-201: Insertion of Sensitive Information Into Sent Data in Go standard library net/http - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-4673: CWE-201: Insertion of Sensitive Information Into Sent Data in Go standard library net/http


Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.6.1 releaseCVE-2025-4673 0 This release of the Red Hat build of OpenTelemetry provides a CVE fix. Breaking changes: * Nothing Deprecations: * Nothing Technology Preview features: * Nothing Enhancements: * Nothing Bug fixes: * Nothing Known issues: * Nothing HighVulnerability#gcve #csaf #cve-2025-4673 Join the discussion	GCVE Database	07/09/2025, 14:31:36 UTC Added: 06/02/2026, 21:43:35 UTC
Red Hat Security Advisory: go-toolset:rhel8 security updateCVE-2025-4673 0 Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fix(es): * net/http: Sensitive headers not cleared on cross-origin redirect in net/http (CVE-2025-4673) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. HighVulnerability#gcve #csaf #cve-2025-4673 Join the discussion	GCVE Database	07/09/2025, 00:58:21 UTC Added: 06/02/2026, 21:43:35 UTC
CVE-2025-4673: CWE-201: Insertion of Sensitive Information Into Sent Data in Go standard library net/httpCVE-2025-4673 0 Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information. MediumVulnerabilityGermanyFranceNetherlands+7#cve #cve-2025-4673 #cwe-201 Join the discussion	CVE Database V5	06/11/2025, 16:42:53 UTC Added: 06/11/2025, 16:54:02 UTC

Threats Tagged 'cve-2025-4673'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-4673'

Lead Pen Test Professional