CVE-2022-27775

2022-06-0100:00:00

CWE-200

hackerone

www.cve.org

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "https://github.com/curl/curl",
    "versions": [
      {
        "version": "curl 7.65.0 to 7.82.0 are vulnerable",
        "status": "affected"
      }
    ]
  }
]