CVE-2023-23914

moderate-risk
Published 2023-02-23

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent transferswhen done on the same command line because the state would not be properlycarried on.

Do I need to act?

-
0.13% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (9)

Affected Vendors

Haxx Netapp Splunk

References (6)

Exploit https://hackerone.com/reports/1813864
Third Party Advisory https://security.gentoo.org/glsa/202310-12
Third Party Advisory https://security.netapp.com/advisory/ntap-20230309-0006/
Exploit https://hackerone.com/reports/1813864
Third Party Advisory https://security.gentoo.org/glsa/202310-12
Third Party Advisory https://security.netapp.com/advisory/ntap-20230309-0006/
47
/ 100
moderate-risk
Severity 31/34 · Critical
Exploitability 1/34 · Minimal
Exposure 15/34 · Moderate