CVE-2023-46218

2023-12-0701:10:34

hackerone

www.cve.org

curl

super cookies

http server

domain verification

psl

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.0%

JSON

This flaw allows a malicious HTTP server to set “super cookies” in curl that
are then passed back to more origins than what is otherwise allowed or
possible. This allows a site to set cookies that then would get sent to
different and unrelated sites and domains.

It could do this by exploiting a mixed case flaw in curl’s function that
verifies a given cookie domain against the Public Suffix List (PSL). For
example a cookie could be set with domain=co.UK when the URL used a lower
case hostname curl.co.uk, even though co.uk is listed as a PSL domain.

CNA Affected

[
  {
    "vendor": "curl",
    "product": "curl",
    "versions": [
      {
        "version": "8.4.0",
        "status": "affected",
        "lessThanOrEqual": "8.4.0",
        "versionType": "semver"
      },
      {
        "version": "7.46.0",
        "status": "unaffected",
        "lessThan": "7.46.0",
        "versionType": "semver"
      }
    ]
  }
]