Orta CVSS 4.3 PoC var
CVE-2025-10966: Curl: güvenlik açığı
Açıklama (NVD)
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
Özet bilgiler
- Ürün
- Haxx Curl
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- %0,43 (yüzdelik 37)
- CWE
- CWE-322
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| haxx-curl | 7.69.0 | — | 8.17.0 |