3053 matches found
libcurl: libcurl: Information disclosure via cached SSL session and early data
A flaw was found in libcurl. An attacker can exploit this by replacing a legitimate HTTP/3 server with an impostor machine. When libcurl attempts a second transfer to the same site with a cached SSL session and early data enabled, it may send sensitive request data before verifying the server's...
7.5CVSS5.2AI score0.00268EPSS
SaveExploits1References7
20