curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.
References
| Link | Resource |
|---|---|
| https://curl.se/docs/CVE-2021-22876.html | Patch Vendor Advisory |
| https://hackerone.com/reports/1101882 | Exploit Patch Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/ | Mailing List Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/ | Mailing List Third Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/ | Mailing List Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html | Mailing List Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210521-0007/ | Third Party Advisory |
| https://security.gentoo.org/glsa/202105-36 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Information
Published : 2021-04-01 18:15
Updated : 2021-07-20 23:15
NVD link : CVE-2021-22876
Mitre link : CVE-2021-22876
JSON object : View
Products Affected
netapp
- hci_compute_node
- solidfire
- hci_management_node
- hci_storage_node
debian
- debian_linux
fedoraproject
- fedora
haxx
- libcurl
broadcom
- fabric_operating_system
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor