Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5q3w-6p3j-mw6p

Опубликовано: 11 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

EPSS

Процентиль: 22%
0.00302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-305

Связанные уязвимости

CVSS3: 6.5
ubuntu
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

CVSS3: 6.5
redhat
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

CVSS3: 6.5
nvd
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

CVSS3: 6.5
msrc
5 месяцев назад

wrong proxy connection reuse with credentials

CVSS3: 6.5
debian
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNE ...

EPSS

Процентиль: 22%
0.00302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-305