CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy…

published May 1, 2015

CVSS
—
EPSS
7%
Percentile
94.3
In the wild
Unconfirmed
What it is

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07337 · 94.3th percentile
Published
2015-05-01T15:00Z
EPSS history
Timeline
  • 01 MAY 15:00Z
    The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy…
    cvelistv5