Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q9p-cx8r-rh2q

Опубликовано: 08 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global known_hosts file.

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global known_hosts file.

EPSS

Процентиль: 10%
0.00035
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-297

Связанные уязвимости

CVSS3: 5.3
ubuntu
3 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

CVSS3: 5.3
nvd
3 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

msrc
3 месяца назад

libssh global known_hosts override

CVSS3: 5.3
debian
3 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting t ...

CVSS3: 5.3
fstec
3 месяца назад

Уязвимость библиотеки libcurl программного средства для взаимодействия с серверами cURL, позволяющая нарушителю оказать воздействие на конфиденциальность защищаемой информации

EPSS

Процентиль: 10%
0.00035
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-297