Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
influxdata/influxdb-client-java
master @ fe48dfe
2
Fixes
0
CVEs
HIGH
Peak severity
100.0%
Coverage
Highlights
Auth Bypass: 1 prior fix. Scrutinize any change in this area.
client/src/main/java/com/influxdb/client/internal/AbstractInfluxDBClient.java: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: The HTTP logging interceptor previously captured the Authorization header, exposing API tokens to anyone with log access. The fix redacts the header and reorders interceptors, but any future logging path or interceptor reordering could reintroduce the leak.
Auth Bypass: Session authentication failed because only the session cookie value was captured instead of the full Set-Cookie header, causing authentication failures that could lead to bypass or misrouting in InfluxDB 2.1. The fix preserves the full header, but any change to cookie parsing or session token handling could reintroduce the issue.