Lucene search
+L

1 matches found

OSV
OSV
added 2022/06/02 2:15 p.m.7 views

AZL-9909 CVE-2022-27780 affecting package curl for versions less than 7.83.1-1

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...

7.5CVSS6.7AI score0.02187EPSS
SaveExploits1References1
Rows per page
Query Builder