Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7xmh-mw7w-rr97

Опубликовано: 03 июн. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.7

Описание

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

EPSS

Процентиль: 44%
0.00215
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-522

Связанные уязвимости

CVSS3: 5.7
ubuntu
около 3 лет назад

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

CVSS3: 5
redhat
около 3 лет назад

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

CVSS3: 5.7
nvd
около 3 лет назад

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak credentials to other services that exist on different protocols or port numbers.

CVSS3: 5.7
msrc
около 3 лет назад

Описание отсутствует

CVSS3: 5.7
debian
около 3 лет назад

An insufficiently protected credentials vulnerability exists in curl 4 ...

EPSS

Процентиль: 44%
0.00215
Низкий

5.7 Medium

CVSS3

Дефекты

CWE-522