Logic Error

2024-04-0520:04:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

curl

vulnerability

logic error

protocol restriction

software

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

curl is vulnerable to Logic Error. The vulnerability is due to an error in the logic for removing protocols when a protocol selection parameter option disables all protocols without adding any, allows attackers to potentially bypass protocol restrictions and perform requests with disabled protocols.

CPENameOperatorVersion
curl:sideq7.72.0-1
curl:edgeeq7.77.0-r0
curl:edgeeq8.1.2-r0
curl:edgeeq7.84.0-r2
curl:edgeeq8.3.0-r1
curl:edgeeq7.80.0-r0
curl:edgeeq7.84.0-r0
curl:edgeeq8.1.0-r3
curl:edgeeq7.79.0-r0
curl:edgeeq8.0.1-r2

Name	Operator	Version
curl:sid	eq	7.72.0-1
curl:edge	eq	7.77.0-r0
curl:edge	eq	8.1.2-r0
curl:edge	eq	7.84.0-r2
curl:edge	eq	8.3.0-r1
curl:edge	eq	7.80.0-r0
curl:edge	eq	7.84.0-r0
curl:edge	eq	8.1.0-r3
curl:edge	eq	7.79.0-r0
curl:edge	eq	8.0.1-r2