CVE-2023-23914

🗓️ 23 Feb 2023 00:00:00Reported by hackeroneType

A cleartext transmission vulnerability in curl <v7.88.0 can cause HSTS functionality to fail when multiple URLs are requested serially

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management	16 Jun 202319:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments	16 May 202322:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar WinCollect agent has multiple vulnerabilities	10 Mar 202314:27	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Commons, Tomcat, Go, libcurl, OpenSSL, Python, Node.js, and Linux can affect IBM Spectrum Protect Plus.	20 Jun 202316:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libcurl, openssl, gnutls, libarchive and libsepol	19 Jun 202312:14	–	ibm
Tenable Nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2023-114)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : curl (ALAS-2023-1986)	7 Mar 202300:00	–	nessus

NVD

Vulners

Node

haxx curlRange7.77.0–7.88.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp clustered_data_ontapMatch9.0-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "Fixed in 7.88.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20230309-0006/
hackerone	www.hackerone.com/reports/1813864
security	www.security.gentoo.org/glsa/202310-12

12 Mar 2025 19:15Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.1

EPSS0.00111

SSVC

CWE-319