Описание
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 7.37.1-1ubuntu2 |
| esm-infra-legacy/trusty | released | 7.35.0-1ubuntu2.1 |
| lucid | not-affected | |
| precise | not-affected | 7.22.0-3ubuntu4.8 |
| trusty | released | 7.35.0-1ubuntu2.1 |
| trusty/esm | released | 7.35.0-1ubuntu2.1 |
| upstream | released | 7.38.0 |
Показывать по
EPSS
5 Medium
CVSS2
Связанные уязвимости
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Sa ...
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
EPSS
5 Medium
CVSS2