Yüksek CVSS 7.8 PoC var
CVE-2020-8177: Curl: güvenlik açığı
Açıklama (NVD)
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,29 (yüzdelik 70)
- CWE
- CWE-99
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.20.0 | 7.70.0 | — |
| debian-debian-linux | 10.0 | 10.0 | — |
| fujitsu-m10-1-firmware | — | — | xcp2410 |
| fujitsu-m10-4-firmware | — | — | xcp2410 |
| fujitsu-m10-4s-firmware | — | — | xcp2410 |
| fujitsu-m12-1-firmware | — | — | xcp2410 |
| fujitsu-m12-2-firmware | — | — | xcp2410 |
| fujitsu-m12-2s-firmware | — | — | xcp2410 |
| fujitsu-m10-1-firmware | — | — | xcp3110 |
| fujitsu-m10-4-firmware | — | — | xcp3110 |
| fujitsu-m10-4s-firmware | — | — | xcp3110 |
| fujitsu-m12-1-firmware | — | — | xcp3110 |
| fujitsu-m12-2-firmware | — | — | xcp3110 |
| fujitsu-m12-2s-firmware | — | — | xcp3110 |
| siemens-sinec-infrastructure-network-services | — | — | 1.0.1.1 |
| splunk-universal-forwarder | 8.2.0 | — | 8.2.12 |
| splunk-universal-forwarder | 9.0.0 | — | 9.0.6 |
| splunk-universal-forwarder | 9.1.0 | 9.1.0 | — |