AZL-25811 CVE-2023-27535 affecting package rust for versions less than 1.72.0-2

🗓️ 30 Mar 2023 20:15:07Reported by GoogleType

osv

osv🔗 osv.dev

Authentication bypass in libcurl older than 8.0.0 enables wrong credentials on FTP transfers.

Reporter	Title	Published	Views	Family All 214
IBM Security Bulletins	Security Bulletin: IBM MQ is affected by vulnerabilities in libcURL (CVE-2023-23916, CVE-2023-27535)	22 Jun 202317:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	15 Jun 202317:06	–	ibm
IBM Security Bulletins	Security Bulletin: cURL as used by IBM QRadar WinCollect Agent contains multiple vulnerabilities	8 Jun 202321:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is affected by libcurl vulnerability	11 Oct 202311:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Progress DataDirect Connect for ODBC	26 Mar 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in cURL libcurl might affect IBM Spectrum Copy Data Management	15 Sep 202313:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.8	18 Oct 202407:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple publicly disclosed Libcurl vulnerabilities affect IBM Safer Payments	16 May 202322:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from curl, go and apr-util	16 Jun 202304:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Improper Authentication in the RHEL UBI (CVE-2023-27535)	19 Jan 202422:05	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-27535

21 Apr 2026 04:23Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.9

EPSS0.00036

libcurl vulnerability ftp authentication bypass connection reuse incorrect credentials rust package version eight