Security Advisory

CVE-2025-4947

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-28 06:29:34

Last updated 2025-05-28 13:58:33

Assigner curl

State PUBLISHED

Description

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.

← Browse all CVEs View on cve.org ↗