Beveiligingsadvies

CVE-2016-8615

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-08-01 06:00:00
Laatst bijgewerkt 2026-04-16 13:35:37
Toegewezen door redhat
CVSS-score 5.3
Status PUBLISHED

Beschrijving

A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.