ALPINE-CVE-2021-22876

ALPINE-CVE-2021-22876

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.

CVSS 5.3 · Moyenne · Correctif disponible

Publication

2021-04-01T18:15:12.823Z

Mise à jour

2026-10-23T17:17:56.150650657Z

Pile logicielle: system

Vérifiez votre serveur →