Yüksek CVSS 8.1 PoC var
CVE-2022-27778: Curl: güvenlik açığı
Açıklama (NVD)
A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - EPSS
- %3,81 (yüzdelik 90)
- CWE
- CWE-706
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.83.0 | 7.83.0 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-clustered-data-ontap | — | — | — |
| netapp-oncommand-insight | — | — | — |
| netapp-oncommand-workflow-automation | — | — | — |
| netapp-snapcenter | — | — | — |
| netapp-solidfire-hci-management-node | — | — | — |
| netapp-h300s-firmware | — | — | — |
| netapp-bh500s-firmware | — | — | — |
| netapp-h700s-firmware | — | — | — |
| netapp-h410s-firmware | — | — | — |
| netapp-hci-compute-node-firmware | — | — | — |
| oracle-mysql-server | — | 5.7.38 | — |
| oracle-mysql-server | 8.0.0 | 8.0.29 | — |
| splunk-universal-forwarder | 8.2.0 | — | 8.2.12 |
| splunk-universal-forwarder | 9.0.0 | — | 9.0.6 |
| splunk-universal-forwarder | 9.1.0 | 9.1.0 | — |