CVE-2016-8615CWE-99
A flaw was found in curl before version 7.51
Medium · published August 1, 2018
What it is
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.
The record
Technical detail
- CVSS v3.0
- 5.3 · MEDIUM
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.04717 · 91.7th percentile
- Weakness
- CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
- Published
- 2018-08-01T06:00Z
EPSS history
Timeline