The Curl Project

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

The Curl Project records in CISA KEV

No The Curl Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Curl · all components

TI-2013-02304 CVE-2013-2617 · GHSA-hxx6-p24v-wg8c

MEDIUM 40

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0442 Published 2013-03-20 No fix listed CWE-94