Düşük CVSS 3.4 PoC var
CVE-2025-0167: Curl: güvenlik açığı
Açıklama (NVD)
When asked to use a `.netrc` file for credentials **and** to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has a `default` entry that omits both login and password. A rare circumstance.
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 3.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N - EPSS
- %0,75 (yüzdelik 55)
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.76.0 | — | 8.12.0 |
| netapp-h700s-firmware | — | — | — |
| netapp-h615c-firmware | — | — | — |
| netapp-h610s-firmware | — | — | — |
| netapp-h610c-firmware | — | — | — |
| netapp-h500s-firmware | — | — | — |
| netapp-h410s-firmware | — | — | — |
| netapp-h410c-firmware | — | — | — |
| netapp-h300s-firmware | — | — | — |
| netapp-bootstrap-os | — | — | — |
| netapp-element-software | — | — | — |
| netapp-ontap | 9 | 9 | — |
| netapp-ontap-select-deploy-administration-utility | — | — | — |
| netapp-ontap-tools | 9 | 9 | — |
| netapp-solidfire-hci-management-node | — | — | — |
| netapp-solidfire-hci-storage-node | — | — | — |