Beveiligingsadvies

CVE-2025-4947

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-05-28 06:29:34

Laatst bijgewerkt 2025-05-28 13:58:33

Toegewezen door curl

CVSS-score 6.5

Status PUBLISHED

Beschrijving

libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks.

← Alle CVE's bekijken Bekijk op cve.org ↗