CVE-2023-46219

2023-12-1201:38:41

hackerone

www.cve.org

cve-2023-46219

file name length

security

hsts

curl

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.5%

JSON

When saving HSTS data to an excessively long file name, curl could end up
removing all contents, making subsequent requests using that file unaware of
the HSTS status they should otherwise use.

CNA Affected

[
  {
    "vendor": "curl",
    "product": "curl",
    "versions": [
      {
        "version": "8.4.0",
        "status": "affected",
        "lessThanOrEqual": "8.4.0",
        "versionType": "semver"
      },
      {
        "version": "7.84.0",
        "status": "unaffected",
        "lessThan": "7.84.0",
        "versionType": "semver"
      }
    ]
  }
]