CVE-2023-46219

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-46219
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46219.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-46219
Aliases
Downstream
Related
Published
2023-12-12T01:38:41Z
Modified
2026-09-10T03:46:44Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Database specific 
{
    "cna_assigner": "hackerone",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46219.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.4.0"
                },
                {
                    "last_affected": "8.4.0"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/curl/curl

Affected ranges

Type
GIT
Repo
https://github.com/curl/curl
Events
Introduced
8e81b9a9b784a00a3006b294d6522e597fdfb820
Fixed
7161cb17c01dcff1dc5bf89a18437d9d729f1ecd
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.84.0"
        },
        {
            "fixed": "8.5.0"
        }
    ],
    "source": "CPE_RANGE"
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-46219.json"