Successfully using libcurl to do a transfer over a specific HTTP proxy (proxyA) with Digest authentication and then changing the proxy host to a second one (proxyB) for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Proxy-Authorization: header field meant for proxyA, to proxyB.
7.81.0-1ubuntu1.248.5.0-2ubuntu10.98.14.1-2ubuntu1.38.18.0-1ubuntu2.17.58.0-2ubuntu3.24+esm107.68.0-1ubuntu2.25+esm5Exploitability
AV:NAC:LPR:NUI:NScope
S:UImpact
C:LI:NA:NCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N