← Database

CVE-2025-22870

MEDIUM CVSS: 4.4 Published: 2025-03-12 Modified: 2026-06-17

Description

Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to "*.example.com", a request to "[::1%25.example.com]:80` will incorrectly match and not be proxied.

Affected Platforms

Unknown

Weakness Type

CWE-115

References