Lucene search

CVE-2023-28321

🗓️ 26 May 2023 21:16:15Reported by hackeroneType

An improper certificate validation vulnerability exists in curl <v8.1.0, allowing mismatches in wildcard patterns

Reporter	Title	Published	Views	Family All 199
Veracode	Improper Certificate Validation	7 Jun 202310:17	–	veracode
Veracode	Improper Certificate Validation	6 Jun 202316:56	–	veracode
OSV	IDN wildcard match	17 May 202308:00	–	osv
OSV	CVE-2023-28321	26 May 202321:15	–	osv
OSV	Red Hat Security Advisory: curl security update	13 Sep 202418:56	–	osv
OSV	Red Hat Security Advisory: curl security update	16 Sep 202412:25	–	osv
OSV	Moderate: curl security update	6 Oct 202323:10	–	osv
OSV	Moderate: curl security update	1 Aug 202300:00	–	osv
OSV	Red Hat Security Advisory: curl security update	13 Sep 202418:52	–	osv
OSV	Red Hat Security Advisory: curl security update	13 Sep 202419:00	–	osv

Nvd

Vulners

Node

haxx curlRange<8.1.0

Node

debian debian_linuxMatch10.0

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Node

netapp clustered_data_ontapMatch-

netapp ontap_antivirus_connectorMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

apple macosRange11.0–11.7.9

apple macosRange12.0–12.6.8

apple macosRange13.0–13.5

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "Fixed in 8.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
support	www.support.apple.com/kb/HT213845
seclists	www.seclists.org/fulldisclosure/2023/Jul/52
seclists	www.seclists.org/fulldisclosure/2023/Jul/48
hackerone	www.hackerone.com/reports/1950627
seclists	www.seclists.org/fulldisclosure/2023/Jul/47
security	www.security.netapp.com/advisory/ntap-20230609-0009/
support	www.support.apple.com/kb/HT213843
support	www.support.apple.com/kb/HT213844
security	www.security.gentoo.org/glsa/202310-12
lists	www.lists.debian.org/debian-lts-announce/2023/10/msg00016.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 May 2023 21:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS35.9

EPSS0.002

CWE-295