Cross-site Scripting (XSS)

🗓️ 14 May 2022 23:45:07Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 29 Views

Curl vulnerability to cross-site scripting

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Curl affect PowerSC	23 Sep 202222:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in libcURL affect IBM Rational ClearCase ( CVE-2022-27778, CVE-2022-27779, CVE-2022-27780, CVE-2022-27782, CVE-2022-30115, CVE-2022-27774 )	25 Jul 202214:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MaaS360 Cloud Extender Agent and Base Module use libcurl with multiple known vulnerabilities	6 Oct 202204:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ is vulnerable to issues with libcurl (CVE-2022-27780, CVE-2022-30115)	25 Aug 202215:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Engineering Requirements Management DOORS/DWA vulnerabilities fixed in 9.7.2.7	24 Oct 202411:46	–	ibm
FreeBSD	curl -- Multiple vulnerabilities	11 May 202200:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package curl version 7.83.1-alt1	19 May 202200:00	–	altlinux
ATTACKERKB	CVE-2022-27780	2 Jun 202214:15	–	attackerkb
Tenable Nessus	Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-065)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : curl, curl-minimal, libcurl (ALAS2022-2022-206)	4 Nov 202200:00	–	nessus

Vulners

Node

curl curlMatch7.69.0-r1os

AND

curl curlMatch7.81.0-r1os

AND

curl curlMatch7.75.0-r0os

AND

curl curlMatch7.68.0-r0os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.80.0-r0os

AND

curl curlMatch7.76.1-r0os

AND

curl curlMatch7.76.0-r0os

AND

curl curlMatch7.78.0-r0os

AND

curl curlMatch7.83.0-r0os

AND

curl curlMatch7.69.0-r0os

AND

curl curlMatch7.77.0-r0os

AND

curl curlMatch7.82.0-r0os

AND

curl curlMatch7.79.0-r0os

AND

curl curlMatch7.77.0-r1os

AND

curl curlMatch7.69.1-r0os

AND

curl curlMatch7.81.0-r0os

AND

curl curlMatch7.78.0-r2os

AND

alpinelinux alpine_linuxMatchedge

OR

curl curlMatch7.72.0-1debian

AND

debian debian_linuxMatch999

OR

curl curlMatch7.83.0-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

curl curlMatch7.80.0-r1os

AND

curl curlMatch7.79.1-r0os

AND

curl curlMatch7.80.0-r0os

AND

alpinelinux alpine_linuxMatch3.15

OR

devel develMatch7.72.0-1ubuntu1debian

AND

devel develMatch7.74.0-1ubuntu1debian

AND

devel develMatch7.68.0-1ubuntu4debian

AND

debian debian_linux

Source	Link
secdb	www.secdb.alpinelinux.org/edge/main.yaml
security	www.security.gentoo.org/glsa/202212-01
hackerone	www.hackerone.com/reports/1553841
security	www.security.netapp.com/advisory/ntap-20220609-0009/

07 Aug 2024 21:35Current

7.6High risk

Vulners AI Score7.6

CVSS 25

CVSS 3.17.5

EPSS0.00185

SSVC

curl vulnerability cross-site scripting url parser injection javascript