Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hm6c-rc5h-32m9

Опубликовано: 03 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

EPSS

Процентиль: 47%
0.00649
Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.1
ubuntu
28 дней назад

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

CVSS3: 6.5
redhat
28 дней назад

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

CVSS3: 9.1
nvd
28 дней назад

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

msrc
24 дня назад

trailing dot domain super cookie

CVSS3: 9.1
debian
28 дней назад

A flaw in curl\u2019s cookie parsing logic allows a malicious HTTP ser ...

EPSS

Процентиль: 47%
0.00649
Низкий

9.1 Critical

CVSS3