Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2020/01/08 11:29 a.m.18 views

curl: Unexpected access to process open files via file:///proc/self/fd/n

Summary: fileconnect routine https://github.com/curl/curl/blob/1b71bc532bde8621fd3260843f8197182a467ff2/lib/file.cL134 does not prevent access to /proc/self/fd pseudo filesystem. Application using libcurl and accepting URLs to fetch can be tricked to return content of any open file by passing a...

1.7AI score
SaveExploits0
Rows per page
Query Builder