2 matches found
curl: TLS 1.3 session ticket mix-up with HTTPS proxy host
A flaw was found in the way libcurl handled TLS 1.3 session tickets. A malicious HTTPS proxy could possibly use this flaw to make libcurl resume a TLS session it previously had with the proxy while intending to resume a TLS session with a target server, making it possible for the proxy to perform...
4.3CVSS7.2AI score0.03141EPSS
SaveExploits1References5
20