Sam Stepanyan :verified: 🐘 on Nostr: #curl: Recently discovered #vulnerability in the popular curl command line tool and ...

#curl: Recently discovered #vulnerability in the popular curl command line tool and library, tracked as CVE-2024-11053 and assigned a CVSS score of 9.1, could lead to the unintended exposure of user credentials on redirects.
This vulnerability poses a significant risk as curl and libcurl are widely used by many applications, often without explicit mention. The potential exposure of credentials could lead to unauthorized access and compromise of sensitive information:
👇
https://securityonline.info/cve-2024-11053-cvss-9-1-curl-vulnerability-exposes-user-credentials-in-redirects/