Security Advisory

CVE-2016-8615

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-01 06:00:00

Last updated 2026-04-16 13:35:37

Assigner redhat

CVSS score 5.3

State PUBLISHED

Description

A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.

← Browse all CVEs View on cve.org ↗