2 matches found
netrc and redirect credential leak
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
3.4CVSS6.8AI score0.01378EPSS
SaveExploits1References1Affected Software2
UBUNTU-CVE-2024-11053
When asked to both use a .netrc file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but...
3.4CVSS6.9AI score0.01378EPSS
SaveExploits1References5
20