CVE-2022-35252

Katalog CVE

CVSS 3.7 · Low EPSS 2,4%

Kerentanan Improper Input Validation pada haxx curl, netapp clustered data ontap +11 lainnya. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

Rincian

Terbit di NVD

23 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

2,4% peluang dieksploitasi; lebih tinggi dari 83,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://seclists.org/fulldisclosure/2023/Jan/20 mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2023/Jan/21 mailing list · advisory pihak ketiga
• https://hackerone.com/reports/1613943 exploit · issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/01/msg00028.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202212-01 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20220930-0005/ advisory pihak ketiga
• https://support.apple.com/kb/HT213603 advisory pihak ketiga
• https://support.apple.com/kb/HT213604 advisory pihak ketiga