Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q9p-cx8r-rh2q

Опубликовано: 08 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global known_hosts file.

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts not present in the specified file if they were added as recognized in the libssh global known_hosts file.

EPSS

Процентиль: 5%
0.00021
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-297

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

CVSS3: 5.3
nvd
около 1 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

CVSS3: 5.3
debian
около 1 месяца назад

When doing SSH-based transfers using either SCP or SFTP, and setting t ...

CVSS3: 5.3
redos
11 дней назад

Уязвимость curl

suse-cvrf
около 1 месяца назад

Security update for curl

EPSS

Процентиль: 5%
0.00021
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-297