Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: https://github.com/curl/curl — GLSA-202105-36 Clear all filters
TI-2021-05751 CVE-2021-22890 · GHSA-5cwr-528x-3vwc

Authentication bypass by spoofing in https://github.com/curl/curl

Priority MEDIUM 53

curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.03057 Published 2021-04-01 Partial fix CWE-300
TI-2021-05737 CVE-2021-22876 · GHSA-jjr6-2g8j-hmwr

Information disclosure in https://github.com/curl/curl

Priority MEDIUM 63

curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05301 Published 2021-04-01 Partial fix CWE-359