Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2026/05/14 12:13 p.m.49 views

curl: cookie: case-insensitive path comparison in replace_existing() allows cookie eviction across distinct paths

Hi all, replaceexisting in lib/cookie.c compares cookie paths case-insensitively at two sites. On case-sensitive servers, /Admin and /admin are distinct resources and are supposed to produce distinct jar entries. Because libcurl conflates them, a Set-Cookie at one path silently evicts the cookie ...

5.8AI score
SaveExploits0
Rows per page
Query Builder