Medium · published April 1, 2021
curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.
| Product | Versions | Fixed in |
|---|---|---|
| haxx/libcurl | ≥ 7.1.1, ≤ 7.75.0 | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/hci_management_node | all versions | — |
| netapp/solidfire | all versions | — |
| netapp/hci_compute_node | all versions | — |
| netapp/hci_storage_node | all versions | — |
| broadcom/fabric_operating_system | all versions | — |
| debian/debian_linux | all versions | — |
| siemens/sinec_infrastructure_network_services | < 1.0.1.1 | 1.0.1.1 |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/essbase | all versions | — |
| splunk/universal_forwarder | ≥ 8.2.0, < 8.2.12 | 8.2.12 |
| splunk/universal_forwarder | ≥ 9.0.0, < 9.0.6 | 9.0.6 |
| splunk/universal_forwarder | all versions | — |