Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-14524

Опубликовано: 11 янв. 2026
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

bearer token leak on cross-protocol redirect

EPSS

Процентиль: 50%
0.00665
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
9 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 6.5
redhat
9 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 5.3
nvd
9 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.

CVSS3: 5.3
debian
9 месяцев назад

When an OAuth2 bearer token is used for an HTTP(S) transfer, and that ...

CVSS3: 5.3
redos
8 месяцев назад

Уязвимость curl

EPSS

Процентиль: 50%
0.00665
Низкий

5.3 Medium

CVSS3