Vulnerability · Published Feb 18, 2022 · Assigned by Google

CVE-2022-0451Auth bypass in Dark SDK

Medium 6.5

In plain English

A medium-severity security flaw in Dart SDK from Google LLC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 63% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.0%top 37.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dart SDK contains the HTTPClient in dart:io library whcih includes authorization headers when handling cross origin redirects. These headers may be explicitly set and contain sensitive information. By default, HttpClient handles redirection logic. If a request is sent to example.com with authorization header and it redirects to an attackers site, they might not expect attacker site to receive authorization header. We recommend updating the Dart SDK to version 2.16.0 or beyond.

Affected products (as reported)

Vendor	Product	Versions
Google LLC	Dart SDK	unspecified – before 2.16.0

Weakness: CWE-305 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://dart-review.googlesource.com/c/sdk/+/229947 x_refsource_MISC
https://github.com/dart-lang/sdk/commit/57db739be0ad4629079bfa94840064f615d35abc x_refsource_MISC