AZL-13652 CVE-2023-23915 affecting package curl for versions less than 7.88.1-1

🗓️ 23 Feb 2023 20:15:13Reported by GoogleType

osv

osv🔗 osv.dev👁 8 Views

Curl prior to 7.88.0 has a cleartext exposure due to HSTS upgrade failure during parallel transfers.

Reporter	Title	Published	Views	Family All 128
ibm	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
ibm	Security Bulletin: Vulnerabilities in Golang, Python, postgresql, cURL libcurl might affect IBM Spectrum Copy Data Management	16 Jun 202319:25	–	ibm
ibm	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
ibm	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
ibm	Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments	16 May 202322:43	–	ibm
ibm	Security Bulletin: IBM QRadar WinCollect agent has multiple vulnerabilities	10 Mar 202314:27	–	ibm
ibm	Security Bulletin: Vulnerabilities in Apache Commons, Tomcat, Go, libcurl, OpenSSL, Python, Node.js, and Linux can affect IBM Spectrum Protect Plus.	20 Jun 202316:49	–	ibm
ibm	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from libcurl, openssl, gnutls, libarchive and libsepol	19 Jun 202312:14	–	ibm
nessus	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2023-114)	21 Mar 202300:00	–	nessus
nessus	Amazon Linux 2 : curl (ALAS-2023-1986)	7 Mar 202300:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-23915

21 Apr 2026 04:20Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.5

EPSS0.00861

curl vulnerability cleartext exposure parallel transfers strict transport security curl library