Lucene search
+L

1 matches found

OSV
OSV
added 2022/12/23 3:15 p.m.7 views

AZL-12107 CVE-2022-43551 affecting package curl for versions less than 7.86.0-2

A vulnerability exists in curl 7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. However, the HSTS mechanism could be bypasse...

7.5CVSS6.7AI score0.1654EPSS
SaveExploits1References1
Rows per page
Query Builder