CVE-2016-8625CWE-20

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue…

Medium · published August 1, 2018

CVSS v3.0
5.3
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.04321 · 91.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-01T06:00Z
EPSS history
Timeline
  • 01 AUG 06:00Z
    curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue…
    cvelistv5