5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.1%
curl 7.1.1 to and including 7.75.0 is vulnerable to an “Exposure of Private Personal Information to an Unauthorized Actor” by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Alpine | edge-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.12-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.13-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.14-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.15-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.16-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.17-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.18-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.19-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
Alpine | 3.20-main | noarch | curl | < 7.76.0-r0 | UNKNOWN |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
6.1 Medium
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.1%