TI-2022-10663 Aliases CVE-2022-27779 GHSA-r5c3-3mf2-x8c7

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is…

LOW 29CWE-201Published 2022-06-01 · Updated 2026-11-02

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-201.

Summary

libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's "cookie engine" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02785 86th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Will not fix Red Hat: no fix planned

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	https://github.com/curl/curl	Fixed in 7.83.1	—	No fix listed	CNA

https://github.com/curl/curl Vendor— Affected Fixed in 7.83.1 Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPE	Versions	Role	Vendor
cpe:2.3:a:haxx:curl::::::::	7.82.0 to before 7.83.1	Vulnerable	Haxx
cpe:2.3:o:netapp:hci_bootstrap_os:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:h:netapp:hci_compute_node:-:::::::*	not specified by NVD	Running on	NetApp
cpe:2.3:a:netapp:clustered_data_ontap:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:h:netapp:hci_compute_node:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:o:netapp:h410s_firmware:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:h:netapp:h410s:-:::::::*	not specified by NVD	Running on	NetApp
cpe:2.3:o:netapp:h700s_firmware:-:::::::*	not specified by NVD	Vulnerable	NetApp

cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:* Versions 7.82.0 to before 7.83.1 Vulnerable ·Haxx
cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:a:netapp:solidfire_\&_hci_management_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Show 7 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:netapp:h700s:-:::::::*	not specified by NVD	Running on	NetApp
cpe:2.3:o:netapp:h500s_firmware:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:h:netapp:h500s:-:::::::*	not specified by NVD	Running on	NetApp
cpe:2.3:o:netapp:h300s_firmware:-:::::::*	not specified by NVD	Vulnerable	NetApp
cpe:2.3:h:netapp:h300s:-:::::::*	not specified by NVD	Running on	NetApp
cpe:2.3:a:splunk:universal_forwarder::::::::	8.2.0 to before 8.2.12; 9.0.0 to before 9.0.6	Vulnerable	Splunk
cpe:2.3:a:splunk:universal_forwarder:9.1.0:::::::*	9.1.0	Vulnerable	Splunk

cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp
cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·NetApp
cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:* Versions 8.2.0 to before 8.2.12; 9.0.0 to before 9.0.6 Vulnerable ·Splunk
cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:* Versions 9.1.0 Vulnerable ·Splunk

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Enterprise Linux 6	Affected	No fix planned: Out of support scope
Red Hat Enterprise Linux 7	Affected	No fix planned: Out of support scope

Not affected: 5 products

.NET Core 3.1 on Red Hat Enterprise Linux
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat JBoss Core Services
Red Hat Software Collections

Timeline

2026-10-02 Threatist record created from CVE-2022-27779
2026-10-03 Alias added: GHSA-r5c3-3mf2-x8c7
2026-11-02 CISA SSVC decision points changed

References

Exploit 1

https://hackerone.com/reports/1553301

Advisory 2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences