TI-2021-05786 CVE-2021-22925 · GHSA-rjqf-6h27-xqfp
Information disclosure in https://github.com/curl/curl
Priority MEDIUM 63
curl supports the `-t` command line option, known as `CURLOPT_TELNETOPTIONS`in libcurl.
RHSA-2021:4511
curl security and bug fix update
Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) curl-7.61.1-22.el8, libcurl-7.61.1-22.el8, libcurl-devel-7.61.1-22.el8 +1
Fixes 3 records
TI-2021-05737 CVE-2021-22876 · GHSA-jjr6-2g8j-hmwr
Information disclosure in https://github.com/curl/curl
Priority MEDIUM 63
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.
TI-2021-05759 CVE-2021-22898 · GHSA-7w8r-q58w-5wcr
Information disclosure in https://github.com/curl/curl
Priority MEDIUM 48
curl 7.7 through 7.76.1 suffers from an information disclosure when the `-t` command line option, known as `CURLOPT_TELNETOPTIONS` in libcurl, is used to send variable=content pairs to TELNET servers.